Privacy Policy — How bdt7 Protects Your Data

01 Information We Collect

bdt7 collects personal information from players at the point of registration, during account verification, when transactions are made, and through ongoing use of the platform. The categories of personal information we collect include the following.

Registration Information

When you create a bdt7 account, we collect your full legal name, date of birth, gender, residential address in Bangladesh, email address, and a mobile number registered in your own name. This information is required to open an account and is held on record for the lifetime of your account relationship with bdt7.

Identity Verification Documents

As part of our Know Your Customer (KYC) obligations, bdt7 may request copies of government-issued identity documents, including your National Identity Card (NID), passport, or birth certificate. We may also request a recent utility bill or bank statement as proof of address. These documents are used solely for identity and age verification and are stored in an encrypted document management system with strictly controlled access.

Financial and Transaction Information

bdt7 maintains records of all deposits, withdrawals, and internal account transfers. This includes transaction amounts in Bangladeshi Taka (৳), timestamps, payment method identifiers (such as the registered bKash or Nagad mobile number), and transaction reference numbers issued by the payment provider. We do not store full mobile banking PINs, card numbers, or banking passwords.

Behavioural and Gaming Data

We automatically record data relating to your use of the platform, including games played, wagers placed, bet amounts, game outcomes, session start and end times, and bonus redemption history. This data is used for account settlement, responsible gaming monitoring, and internal analytics.

Technical and Device Data

Each time you access bdt7, we automatically collect technical data including your IP address, browser type and version, operating system, device type, screen resolution, time zone setting (typically Bangladesh Standard Time, UTC+6), and unique device identifiers. This data is used for fraud prevention, security monitoring, and to detect and prevent the use of VPN or proxy services in breach of our Terms & Conditions.

02 How We Use Your Data

bdt7 uses the personal information it collects only for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your explicit consent.

Account Management and Service Delivery

The primary use of your personal data is to operate and maintain your bdt7 account, process your deposits and withdrawal requests, settle your bets and casino game outcomes, apply bonuses and promotions to your account, and communicate with you about account-related matters such as verification requests, transaction confirmations, and security alerts.

Identity and Age Verification

We use the registration and identity document data you provide to verify that you are who you say you are and that you are aged 18 or above. This verification is a legal and operational requirement. bdt7 will not process a withdrawal request until satisfactory identity verification has been completed.

Fraud Prevention and Security

Technical and behavioural data is analysed continuously to detect and prevent fraudulent activity, including account takeover attempts, bonus abuse, money laundering, and the creation of duplicate accounts. Where suspicious activity is detected, bdt7 may suspend an account pending investigation and, where appropriate, refer the matter to relevant authorities.

Responsible Gaming Monitoring

bdt7 uses your betting activity data, session duration records, and deposit history to monitor for indicators of problem gambling behaviour. Where such indicators are identified, our responsible gaming team may proactively reach out to offer support, apply protective limits, or implement a cooling-off period. This use of your data reflects our commitment to player welfare. You can review our full approach on the Responsible Gaming page.

Marketing and Promotional Communications

With your consent at the point of registration, bdt7 may send you promotional emails or SMS messages regarding new games, upcoming cricket and sports betting markets (including BPL, IPL, and T20 World Cup events), seasonal offers (such as Eid promotions or Pohela Boishakh special bonuses), and platform news. You may withdraw your consent to marketing communications at any time by contacting our support team or updating your account preferences.

Legal and Regulatory Compliance

bdt7 may use and retain your personal data where necessary to comply with applicable legal obligations, including responding to lawful requests from law enforcement or regulatory authorities, maintaining financial records for the minimum periods required by law, and resolving legal disputes or formal complaints.

03 Data Sharing & Disclosure

bdt7 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below.

Technology and Platform Partners

To operate the bdt7 platform, we work with a number of technology service providers, including game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), platform infrastructure providers, customer support software vendors, and anti-fraud solution providers. These partners are granted access only to the minimum data necessary to perform their contracted function and are bound by strict data processing agreements that prohibit them from using bdt7 player data for any other purpose.

Payment Processing Partners

When you make a deposit or withdrawal, relevant transaction data is shared with your selected payment provider — such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard — to the extent necessary to process the transaction. Each of these providers operates under its own privacy policy, which governs how they handle data within their own systems.

Identity Verification Services

bdt7 may use third-party KYC and identity verification services to authenticate the identity documents you submit. These services process your identity data under strict confidentiality obligations and use it solely for the purpose of verification. No identity document data is shared beyond what is required for this specific purpose.

Legal and Regulatory Disclosures

bdt7 may disclose your personal information to law enforcement agencies, government authorities, or other third parties where required to do so by applicable law, a court order, or other legal process, or where bdt7 reasonably believes that disclosure is necessary to protect the rights, property, or safety of bdt7, its players, or the public.

04 Cookies & Tracking Technologies

bdt7 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, to remember your preferences, and to gather analytics data that helps us improve the user experience.

Essential Cookies

These cookies are strictly necessary for the bdt7 platform to operate. They manage your login session, maintain your account state across page loads, and enforce security controls. Essential cookies cannot be disabled without causing the platform to malfunction. No consent is required for their use as they are technically necessary for service delivery.

Analytics and Performance Cookies

bdt7 uses analytics tools to understand how players navigate the platform, which game categories attract the most engagement, and where technical errors occur. The data collected via analytics cookies is aggregated and anonymised where possible. It is used solely for internal platform improvement and is not shared with third-party advertisers.

Preference Cookies

These cookies remember your platform preferences, such as your last-selected game category, notification settings, and display preferences. They improve your experience by reducing the need to re-enter preferences on each visit. Preference cookies can be cleared via your browser settings at any time without affecting your ability to use the platform's core features.

Managing Cookies

You can manage or delete cookies at any time through your browser's settings. Please note that disabling non-essential cookies may affect the performance or personalisation features of the bdt7 platform. Your browser's help documentation will explain how to manage cookie settings for your specific browser and device.

05 Data Security Measures

bdt7 applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our key security practices include the following.

• SSL/TLS Encryption: All data transmitted between your device and the bdt7 platform is encrypted using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology. This ensures that your login credentials, personal information, and payment data cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal and financial data stored on bdt7's servers is encrypted at rest using AES-256 encryption. Identity documents submitted for KYC verification are stored in an access-controlled encrypted document vault.
• Access Controls: Access to systems that hold player personal data is restricted to authorised bdt7 personnel on a need-to-know basis. All internal access is logged and subject to regular audit review.
• Intrusion Detection: bdt7 maintains 24/7 network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their bdt7 accounts as an additional layer of protection against unauthorised access.
• Regular Security Assessments: The bdt7 platform undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

06 Data Retention Policy

bdt7 retains your personal data for as long as your account remains active and for a defined period after account closure, in accordance with the following retention principles.

Active Account Data

For the duration of your active account relationship with bdt7, all registration data, identity verification documents, transaction records, betting history, and support correspondence are retained in full. This data is required for the ongoing delivery of our services and for compliance with our legal and regulatory obligations.

Post-Closure Retention

Following the closure of your bdt7 account — whether at your own request or initiated by bdt7 — your personal data will be retained for a minimum period of five (5) years from the date of closure. This retention period reflects our obligations to maintain financial records for anti-money-laundering compliance purposes and to preserve data that may be required in the event of a dispute, chargeback, or legal claim arising after account closure.

Marketing Data

If you provided consent to receive marketing communications from bdt7, your marketing preferences and associated contact data will be retained until you withdraw your consent. Upon withdrawal of consent, your details will be removed from active marketing lists within 10 working days. Note that withdrawal of marketing consent does not affect the retention of your core account or transaction data, which continues under the retention periods described above.

Deletion Requests

Where you request deletion of your personal data and bdt7 is not subject to a legal obligation to retain it, we will action your deletion request within 30 days. Where retention obligations apply, we will inform you of the specific legal basis and the date on which deletion will be carried out.

07 Your Data Rights

As a bdt7 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team in writing at [email protected]. bdt7 will respond to all data rights requests within 30 days of receipt.

• Right of Access: You may request a copy of the personal data bdt7 holds about you, including your registration information, transaction history, and any identity documents on file. We will provide this in a structured, readable format.
• Right to Rectification: If any personal data bdt7 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account data such as your registered address or contact number, you may update this directly within your account settings.
• Right to Erasure: Subject to our legal retention obligations, you may request that bdt7 delete your personal data. Where deletion is not immediately possible due to retention requirements, bdt7 will confirm the timeline for deletion.
• Right to Restrict Processing: In certain circumstances, you may request that bdt7 restrict the processing of your data — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that bdt7 provide your personal data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where bdt7 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object: You may object to bdt7 processing your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, bdt7 will cease marketing processing immediately.

08 Third-Party Payment Providers

To process deposits and withdrawals in Bangladeshi Taka (৳), bdt7 integrates with a range of third-party payment providers that are widely used across Bangladesh, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard.

When you initiate a payment transaction on bdt7, you will interact directly with your chosen payment provider's interface or mobile application. The personal and financial data you enter within that provider's system — including your mobile banking PIN, OTP codes, and account credentials — is processed entirely by the payment provider and is not accessible to bdt7.

Each payment provider operates under its own privacy policy, terms of service, and data protection practices. bdt7 has no control over and accepts no responsibility for the data handling practices of these third-party providers. We recommend that you review the privacy policies of your chosen payment method provider before initiating any transaction.

09 Minors & Age Verification

bdt7 is strictly an adults-only platform. We do not knowingly collect personal data from or provide services to individuals under the age of 18. All users must confirm at the point of registration that they are aged 18 or above, and bdt7 actively verifies this through our KYC process.

If bdt7 becomes aware, through our verification processes or through a report from a third party, that personal data belonging to a person under the age of 18 has been collected on our platform, we will immediately suspend the associated account, delete the personal data of the minor, and reverse any transactions associated with that account to the extent possible.

If you are a parent or guardian and believe that your child has registered an account on bdt7, please contact us immediately at [email protected]. We take all reports of underage access seriously and will investigate and act upon them as a priority matter.

bdt7 also recommends that parents and guardians of minors use parental control software to restrict access to gambling websites. Tools such as device-level content filters and mobile data management applications can provide an additional layer of protection for younger household members.

10 Updates to This Policy

bdt7 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made to this Policy, we will notify registered players by email to their registered address and by displaying a notice on the bdt7 platform. The updated Policy will carry a revised effective date at the top of this document.

We encourage you to review this Privacy Policy periodically to remain informed about how bdt7 protects your personal data. Continued use of the bdt7 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the changes.

Contact for Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by bdt7, please contact our team in writing at [email protected]. We aim to acknowledge all privacy-related enquiries within two working days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within fifteen working days.