bdt7 Privacy Policy

bdt7 ("bdt7", "we", "us", "our") operates the online casino and sports betting platform accessible at bdt7.onl. This Privacy Policy explains how bdt7 collects, processes, stores, uses, and protects personal information relating to players, prospective players, and visitors to the Platform (collectively, "you" or "your"). This Policy applies to all personal data collected through the Platform, including information provided during registration, during account use, through payment transactions, and through your browsing of the Platform.

By accessing or using the bdt7 Platform, you acknowledge that you have read this Privacy Policy and understand how your personal data will be handled. If you do not agree with the practices described in this Policy, please do not use the Platform. This Privacy Policy should be read alongside the bdt7 Terms and Conditions, which together form the complete agreement governing your use of the Platform.

The following principles guide every decision we make about your personal data on the bdt7 Platform:

bdt7 collects personal data through several means: directly from you when you register or use the Platform, automatically as you browse the Platform, and from third-party payment providers when you make transactions. The following table summarises the main categories of data collected:

bdt7 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond what is strictly required for identity verification purposes. Where identity document images are collected for KYC, they are used solely for the purpose of age and identity verification and are not repurposed for any other use.

bdt7 uses personal data collected from players for specific, documented purposes. We do not use your data for purposes that are incompatible with why it was originally collected. The main purposes for which we use your data are:

• Account creation and management: to register your account, verify your identity, manage your login credentials, and provide you with access to all Platform features.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, to reconcile transactions, and to handle payment disputes or chargebacks.
• KYC and regulatory compliance: to verify player age (21+) and identity as required, to comply with applicable anti-money laundering obligations, and to fulfil any reporting requirements under applicable law.
• Service delivery and support: to deliver the games, sports betting markets, and promotions you access; to provide customer support via live chat; and to resolve complaints or disputes.
• Platform security and fraud prevention: to detect and prevent fraudulent activity, multiple account registrations, bonus abuse, money laundering, and other prohibited conduct as defined in the Terms and Conditions.
• Responsible gaming: to monitor gameplay activity patterns and, where we identify potential indicators of problem gambling, to provide appropriate responsible gaming interventions, tools, and communications.

bdt7 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the Terms and Conditions you agreed to when registering your bdt7 account, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC and age verification requirements, anti-money laundering reporting, and cooperation with regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out in bdt7's legitimate interests, including fraud detection and prevention, Platform security, responsible gaming monitoring, and the improvement of Platform services — where those interests are not overridden by your rights and freedoms.
• Consent: Where bdt7 relies on your consent as the legal basis for processing — for example, for optional marketing communications — you may withdraw that consent at any time by contacting support or updating your account communication preferences.

bdt7 does not sell or rent your personal data. We share personal data only in the following limited circumstances, and only with parties that are bound by appropriate data protection obligations:

• Payment service providers: We share necessary transaction data with bKash, Nagad, Rocket, and Upay solely for the purpose of processing deposits and withdrawals. These providers have their own privacy policies governing data they receive in their capacity as payment processors.
• Game providers: Technical session and gameplay data is shared with certified game providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi to facilitate game delivery, dispute resolution, and RNG certification.
• Fraud prevention and security partners: Anonymised or pseudonymised technical data may be shared with fraud detection service providers for the purpose of identifying and preventing fraudulent activity on the Platform.
• Regulatory and law enforcement authorities: Where bdt7 is legally required to disclose personal data to a regulatory body, financial intelligence unit, or law enforcement authority, we will comply with such requirements. We will notify you of any such disclosure where we are legally permitted to do so.

bdt7 handles all financial data with heightened care. When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, or Upay, the transaction is processed directly through the relevant payment provider's secure gateway. bdt7 does not store your full mobile wallet PIN, bKash wallet password, or any equivalent authentication credential. We record only the information necessary to confirm that a transaction occurred: the wallet number (partially masked for display), the transaction reference ID, the amount in BDT, and the timestamp.

Transaction records are retained for as long as is required to meet our legal and regulatory obligations, including anti-money laundering record-keeping requirements. All financial records are stored on secured, access-controlled servers. Access to financial data is restricted to authorised bdt7 personnel on a strict need-to-know basis, and all such access is logged and auditable.

bdt7 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your logged-in session, and analyse Platform usage patterns. The following types of cookies are used:

• Essential cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in, security cookies that prevent cross-site request forgery, and cookies that remember your language preference. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Enable enhanced Platform features such as remembering your preferred bet size, your game history view settings, and other personalisation options you have configured within your account.
• Analytics cookies: Help bdt7 understand how players use the Platform — which pages are visited most frequently, where users encounter difficulties, and how navigation flows are used — so that we can improve the Platform experience.
• Security cookies: Used to detect and prevent fraudulent logins, bot activity, and suspicious session behaviour. These cookies are part of bdt7's fraud prevention infrastructure and cannot be disabled.

bdt7 does not use advertising or third-party tracking cookies for the purpose of targeting you with advertisements on other websites. You can manage cookie preferences through your browser settings. Please note that disabling essential or security cookies may prevent the Platform from functioning correctly or may log you out of your session.

bdt7 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Retention periods vary depending on the type of data and the reason for retention:

• Active account data: Personal data associated with an active bdt7 account is retained for the full duration of the account relationship and for a minimum period of five (5) years following account closure, in accordance with standard financial record-keeping obligations.
• KYC and identity documents: Identity verification documents and records are retained for the duration of the account relationship plus a minimum of five (5) years after account closure, consistent with anti-money laundering record-keeping standards.
• Marketing and communications data: Where you have consented to receiving marketing communications from bdt7, associated data is retained until you withdraw your consent or request deletion, whichever occurs first. Following withdrawal of consent, marketing-specific data is deleted within 30 days.

As a bdt7 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the bdt7 support team via live chat or at [email protected]. We will respond to all valid data rights requests within 30 days:

• Right of access: You may request a copy of all personal data that bdt7 holds about you, including how it is used, where it is stored, and with whom it has been shared.
• Right to rectification: If any personal data bdt7 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where there is no overriding legal obligation to retain it.
• Right to restrict processing: You may request that bdt7 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis for processing.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that bdt7 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to bdt7 processing your personal data on the basis of legitimate interests. Where your objection is upheld, bdt7 will cease processing for that purpose unless compelling legitimate grounds exist that override your rights.

Please note that some data rights requests may be subject to limitations where bdt7 has overriding legal obligations to retain data — for example, transaction records retained for anti-money laundering compliance. In such cases, bdt7 will clearly explain the legal basis for retaining the data and will restrict its use to only those legally required purposes.

bdt7 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, the measures bdt7 employs include:

• SSL/TLS encryption: All data in transit between your device and bdt7 servers is encrypted using industry-standard SSL/TLS protocols. This protects your login credentials, personal information, and financial data from interception.
• Access controls: Access to personal data within bdt7's systems is restricted on a strict need-to-know basis. All staff with access to personal data are trained on data protection obligations and are bound by confidentiality obligations.
• Secure storage: Personal data is stored on access-controlled servers with regular security patching, intrusion detection systems, and backup protocols to prevent data loss.
• Incident response: bdt7 maintains a data breach response protocol. In the event of a security incident that affects your personal data, bdt7 will assess the incident promptly and notify affected players as required under applicable law.

bdt7 uses gameplay data not only to deliver services but also as part of its commitment to responsible gaming. Where our systems identify patterns that may indicate problem gambling behaviour — such as rapidly escalating bet sizes, extended uninterrupted play sessions, or frequent large deposits followed by immediate withdrawal requests — bdt7 may use this data to proactively reach out to the player with responsible gaming resources, apply cooling-off prompts, or trigger a responsible gaming review.

Responsible gaming-related data, including self-exclusion requests, deposit limit settings, and time-out activations, is treated with the highest level of confidentiality. This data is used solely to give effect to your responsible gaming choices and to inform our platform-wide responsible gaming programme. It is never shared with third parties for commercial purposes and is retained for the minimum period necessary to fulfil its protective function.

The bdt7 Platform integrates with certain third-party services that are essential to Platform operation. Each third-party service provider has its own privacy practices, and bdt7 is not responsible for the data practices of third parties beyond its direct contractual relationships with them. Key third-party integrations include:

• Payment providers (bKash, Nagad, Rocket, Upay): Transaction data shared with these providers is governed by their respective privacy policies and terms of service in addition to bdt7's own contractual arrangements with them.
• Game software providers (Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi): Technical game session data is shared with these providers to facilitate game delivery, RNG certification audits, and dispute resolution processes.
• Security and fraud prevention services: Anonymised technical and behavioural data may be shared with specialist fraud detection vendors to protect the Platform and its players. These vendors process data under strict confidentiality agreements with bdt7.

The bdt7 Platform is strictly intended for adults aged 21 and above. bdt7 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the registration process, and bdt7 reserves the right to require additional documentary proof of age at any time. If bdt7 discovers that an account has been registered by a person under the age of 21, the account will be closed immediately, all associated personal data will be deleted or anonymised in accordance with applicable law, and any winnings accumulated will be voided.

bdt7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, we will notify registered players via the email address associated with their account and/or via a prominent notice on the Platform. The revised Policy will take effect on the date specified in the notification.

Your continued use of the bdt7 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated practices described in that Policy. We recommend bookmarking this page and reviewing it periodically. The "Last updated" date at the top of this page indicates when the Policy was most recently revised.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact the bdt7 support team. All data rights requests will be handled confidentially and responded to within 30 days. Our support team is available 24 hours a day, 7 days a week. Please note that the email address below is provided as plain text for written correspondence only and is not a clickable link.