bdkq Privacy Policy

1 Introduction

bdkq is Bangladesh's premier online casino and sports betting platform. In the course of providing its services — including account management, payment processing, game delivery, customer support, and responsible gaming compliance — bdkq necessarily collects and processes personal data about its players.

bdkq takes its obligations with respect to personal data seriously. This Policy is intended to give you a clear, honest, and complete account of our data practices so that you can make informed decisions about your use of the Platform. We are committed to processing your personal data lawfully, fairly, and transparently, and to implementing and maintaining appropriate technical and organisational security measures at all times.

For the purposes of this Policy, "personal data" means any information relating to an identified or identifiable natural person — that is, any information from which you could be directly or indirectly identified, such as your name, email address, mobile number, financial account details, or device identifiers.

2 Data We Collect

bdkq collects personal data in three principal ways: data you provide directly, data generated automatically through your use of the Platform, and data we receive from third parties (such as payment processors and identity verification services). The table below summarises the main categories:

3 How We Use Your Data

bdkq uses the personal data it collects for the following purposes:

• Account Creation & Management: To register your account, verify your identity, maintain your account settings, and communicate important account-related information to you.
• Service Delivery: To provide access to the games, sports betting markets, live casino, and other features available on the Platform, and to personalise your experience where appropriate.
• Payment Processing: To process deposits and withdrawals in BDT via your chosen payment method, to reconcile transactions, and to detect and prevent payment fraud.
• Identity Verification (KYC): To comply with our anti-money laundering (AML) obligations by verifying that the account holder is who they claim to be, is of legal age (21+), and is not subject to any sanctions or restrictions.
• Responsible Gaming Compliance: To implement and monitor responsible gaming tools including deposit limits, session timers, cooling-off periods, and self-exclusion. We are obligated to track this data to protect players who may be at risk of gambling-related harm.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Security & Fraud Prevention: To monitor for suspicious activity, prevent multi-accounting, detect bonus abuse, and protect the integrity of the Platform for all players.
• Legal & Regulatory Compliance: To meet our obligations under applicable law, including responding to lawful requests from regulatory or law enforcement authorities.
• Service Improvement: To analyse aggregated, anonymised usage patterns to improve Platform performance, game selection, and user experience. This analysis does not identify individual players.
• Direct Marketing (with consent): Where you have expressly opted in to receive promotional communications, to send you information about bdkq offers, promotions, and new game releases relevant to you. You may withdraw this consent at any time by contacting [email protected].

4 Legal Basis for Processing

bdkq processes your personal data on one or more of the following legal bases, depending on the purpose of the processing:

• Contractual Necessity: Processing that is necessary to perform our contract with you — including account management, service delivery, and payment processing. Without this processing, bdkq could not provide the Platform to you.
• Legal Obligation: Processing that is required to comply with applicable law — including KYC identity verification, AML transaction monitoring, and responsible gaming record-keeping.
• Legitimate Interests: Processing that is necessary for bdkq's legitimate business interests — such as fraud prevention, Platform security monitoring, and aggregated analytics — provided those interests are not overridden by your rights and interests.
• Consent: Processing that relies on your freely given, specific, and informed consent — most notably, direct marketing communications. Where consent is the basis for processing, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing

bdkq does not sell your personal data to third parties. We may share your personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate contractual confidentiality obligations:

• Payment Service Providers: Mobile financial services (bKash, Nagad, Rocket, Upay) and banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) for the purpose of processing deposits and withdrawals. These providers receive only the transaction data necessary to complete the transfer.
• Identity Verification Partners: Third-party KYC and AML screening services engaged by bdkq to verify the identity of players and screen against sanctions lists. These partners process identity document images and biometric data solely for verification purposes and are contractually prohibited from using the data for any other purpose.
• Game Studio Providers: Licensed third-party game studios (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming) may receive your account identifier and session token for the purpose of delivering game content and recording game outcomes. These studios do not receive your full identity or financial data.
• IT & Platform Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on bdkq's behalf under strict data processing agreements that prohibit independent use of your data.
• Customer Support Tools: Third-party live chat and support ticket management platforms used to deliver our customer support function. These platforms process your communications data only to the extent necessary to provide the support service.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or legitimate regulatory request, bdkq may disclose personal data to competent authorities. bdkq will notify you of such a disclosure where legally permitted to do so.

6 Cookies & Tracking Technologies

bdkq uses cookies and similar tracking technologies on the Platform to support its operation, improve player experience, and maintain security. The following categories of cookie are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies maintain your logged-in session, preserve your language and currency preferences, and protect the Platform against cross-site request forgery. They cannot be disabled without affecting Platform functionality.
• Analytical Cookies: Used to collect aggregated, anonymised information about how players navigate the Platform — such as which pages are visited most frequently and how long sessions typically last. This data helps bdkq improve the Platform over time. No personally identifiable information is retained in analytical cookies.
• Functional Cookies: Used to remember your preferences and personalisation settings (such as your preferred deposit method or game category view) across sessions so you do not have to reconfigure them on each visit.
• Security Cookies: Used to support fraud detection and Platform integrity monitoring, including device fingerprinting to identify unusual login patterns that may indicate account takeover attempts.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the Platform's core functionality and may prevent you from logging in or completing transactions.

7 Data Security

bdkq implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and bdkq's servers is encrypted using industry-standard Transport Layer Security (TLS) protocols. The padlock indicator in your browser confirms that this encryption is active during your session.
• Encryption at Rest: Personal data stored in bdkq's databases — including identity documents, financial records, and account information — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within bdkq's systems is restricted to authorised personnel on a strict need-to-know basis. Administrative access is protected by multi-factor authentication and comprehensive activity logging.
• Regular Security Audits: bdkq conducts periodic internal and independent third-party security reviews of its Platform infrastructure to identify and remediate vulnerabilities proactively.
• Independent RNG Auditing: The random number generators underpinning all bdkq games are subject to independent auditing to ensure fair play outcomes, protecting both the integrity of game results and the financial data associated with each game round.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bdkq will notify you without undue delay and will take all reasonable steps to contain and remediate the breach.

8 Data Retention

bdkq retains personal data only for as long as is necessary for the purposes set out in this Policy, or for as long as we are required to do so by applicable legal or regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a period of 5 years following permanent account closure, to comply with AML record-keeping obligations and to resolve any disputes that may arise.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC & Identity Verification Documents: Retained for a minimum of 5 years following account closure or the completion of the verification process, whichever is later.
• Customer Support Communications: Retained for 2 years from the date of the last communication, unless a longer period is required in connection with an ongoing dispute or regulatory inquiry.
• Marketing Consent Records: Retained for the duration of your account and for 1 year following account closure, as evidence of the consent you provided.
• Technical & Log Data: Server logs and session data are retained for a maximum of 12 months unless required for a longer period in connection with a security investigation or legal proceeding.

When personal data reaches the end of its retention period, bdkq will either securely delete it or anonymise it so that it can no longer be linked to any individual. Anonymised data may be retained indefinitely for aggregated statistical analysis.

9 Your Data Rights

Subject to applicable law, you have the following rights with respect to the personal data bdkq holds about you:

• Right of Access: You may request a copy of the personal data bdkq holds about you. bdkq will provide this within 30 days of a valid request, in a commonly used electronic format.
• Right to Rectification: If any personal data bdkq holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account-level data, you may be able to update certain information directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that bdkq delete your personal data. This right is subject to bdkq's legal obligations — for example, we are required by law to retain financial transaction records for a minimum period and cannot delete them on request.
• Right to Restrict Processing: You may request that bdkq restricts the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data or object to its processing, pending resolution of your concern.
• Right to Object: Where bdkq processes your personal data on the basis of legitimate interests, you have the right to object to that processing. bdkq will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to Data Portability: Where processing is carried out by automated means on the basis of contract or consent, you may request that bdkq provide your personal data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact bdkq at [email protected]. bdkq will respond to all valid requests within 30 days. In complex cases or where a large volume of data is involved, this period may be extended by a further 60 days, in which case bdkq will notify you of the extension and the reasons for it.

10 Children & Minors

The bdkq Platform is strictly intended for adults aged 21 years and above. bdkq does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the registration and KYC process, and bdkq employs additional monitoring to detect potential underage use.

If bdkq discovers or has reason to believe that a player is under 21 years of age, it will immediately suspend the account, void any wagers placed, and take steps to return any real-money deposits (where the funds are not associated with fraudulent activity). All personal data associated with an underage account will be deleted as soon as it is no longer required for the purpose of investigating and resolving the underage access incident.

11 Third-Party Links

The bdkq Platform may contain references to third-party game studios (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming) and payment partners (bKash, Nagad, Rocket, Upay). These entities operate their own platforms and privacy policies. bdkq is not responsible for the privacy practices of any third-party platform, and this Policy does not extend to them.

When you use a mobile financial service such as bKash or Nagad to deposit or withdraw funds, you are interacting directly with that service's platform and are subject to their respective terms of service and privacy policies. bdkq encourages you to read the privacy policies of any third-party service you use in connection with your bdkq account.

12 Policy Updates

bdkq may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The revised Policy will be published on the Platform with an updated effective date at the top of this page.

Where an update to the Policy is material — meaning it significantly affects your rights or how your data is processed — bdkq will provide advance notice via the Platform's notification system or by email to your registered address, giving you the opportunity to review the changes before they take effect. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

We recommend reviewing this Policy periodically to stay informed about how bdkq protects your personal data.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or bdkq's data practices, please contact us using the details below. We are committed to addressing all privacy-related enquiries promptly and thoroughly.

• Email: [email protected] (plain text — not a clickable link)
• Response Time: bdkq aims to acknowledge all privacy enquiries within 24 hours and to provide a substantive response within 30 days
• Operating Hours: Customer support is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Data Rights Requests: Please clearly state in your email that you are submitting a data subject access request or exercising a specific data right, so that your request can be routed to the appropriate team without delay