About This Document: This Privacy Policy ("Policy") applies to all personal data processed by badbdt ("badbdt", "we", "us", "our") in connection with your use of the badbdt website at https://badbdt.app and all related services. By registering an account or otherwise using the badbdt platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
badbdt is committed to protecting the privacy and personal data of all users who interact with our platform. This Policy sets out in clear, plain English the types of personal data we collect from players in Bangladesh, the purposes for which that data is processed, the conditions under which it may be shared with third parties, and the rights that users hold in relation to their data.
badbdt handles personal data responsibly and implements appropriate technical and organisational measures to keep your information secure at all times. We collect only the personal data that is genuinely necessary to operate the platform, comply with applicable legal obligations, and deliver the services you have requested.
This Policy should be read alongside the badbdt Terms & Conditions and Responsible Gaming Policy, each of which forms part of the overall agreement governing your use of our platform.
badbdt may collect and process the following categories of personal data in connection with your account and use of the platform:
| Category |
Examples |
Purpose |
| Identity Data |
Full name, date of birth, national ID or passport number |
Account registration, age and identity verification |
| Contact Data |
Email address, phone number, city or district (e.g., Dhaka, Chittagong) |
Account communications, support, security alerts |
| Financial Data |
bKash / Nagad / Rocket / Upay account references, transaction records, deposit and withdrawal history |
Payment processing, anti-money laundering compliance |
| Technical Data |
IP address, device type, browser type and version, operating system, session timestamps |
Security monitoring, fraud prevention, platform optimisation |
| Usage Data |
Pages visited, games played, bets placed, session duration, click patterns |
Service improvement, responsible gaming monitoring, personalisation |
| Communications Data |
Support chat transcripts, emails sent to [email protected], feedback submissions |
Support resolution, quality assurance, dispute handling |
| Verification Documents |
Copies of government-issued ID, proof of address, payment method confirmation |
KYC (Know Your Customer) compliance, withdrawal processing |
Data Minimisation: badbdt applies a data minimisation principle — we request only the personal data that is genuinely necessary for the stated purpose. We do not collect sensitive data categories such as racial or ethnic origin, religious beliefs, or biometric data unless specifically required by law.
badbdt collects personal data through the following channels:
- Direct submission: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions.
- Automated collection: Technical data such as IP addresses, device identifiers, and usage patterns collected automatically as you navigate the badbdt platform, via cookies, server logs, and similar technologies.
- Third-party sources: Identity verification providers, payment processors (including bKash, Nagad, Rocket, Upay, and cryptocurrency networks), and fraud detection services may supply or confirm personal data relating to your account.
- Public sources: In limited circumstances, badbdt may cross-reference information against publicly available records for identity verification or regulatory compliance purposes.
badbdt processes your personal data on one or more of the following legal grounds, depending on the nature of the processing activity:
- Contractual necessity: Processing required to fulfil the contract between you and badbdt — including account management, payment processing, game delivery, and withdrawal handling.
- Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering (AML) obligations, know-your-customer (KYC) rules, and record-keeping requirements.
- Legitimate interests: Processing necessary for badbdt's legitimate business interests, including fraud prevention, platform security, responsible gaming
monitoring, and service improvement — provided those interests are not overridden by your rights and interests.
- Consent: Where badbdt relies on your consent as the legal basis for processing (for example, in relation to marketing communications), you have the right to withdraw that consent at any time by contacting [email protected] or updating your account preferences.
badbdt uses the personal data we collect for the following specific purposes:
- Account creation and management: To register your account, verify your identity and age, maintain your account profile, and manage your login credentials securely.
- Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, USDT, BTC, and other supported payment methods. Financial records are retained as required by applicable law.
- Service delivery: To provide access to casino games, sports betting markets including cricket BPL and T20 events, slots, live casino, and all other features available on the badbdt platform.
- Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance via live chat and email.
- Security and fraud prevention: To monitor accounts and transactions for suspicious activity, detect and prevent cheating, collusion, money laundering, and unauthorised access to the platform.
- Responsible gaming: To monitor gaming behaviour, identify patterns that may indicate problem gambling, enforce deposit limits, session restrictions, and self-exclusion requests in line with our Responsible Gaming Policy.
- Legal compliance: To meet our obligations under applicable anti-money laundering, KYC, and financial record-keeping requirements.
- Platform improvement: To analyse aggregated usage data, improve platform performance, test new features, and personalise your experience on badbdt.
- Marketing communications: Where you have provided consent, to send you promotional offers, bonus notifications, and updates about new games or features. You may opt out at any time.
badbdt does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where explicitly required for fraud prevention or regulatory compliance purposes.
badbdt does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Your data may be shared with the following categories of third parties only to the extent necessary and for the purposes described in this Policy:
- Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and cryptocurrency network operators receive the minimum financial data necessary to process your deposit or withdrawal transactions.
- Identity verification providers: Third-party KYC and age-verification services receive identity documents you submit in order to verify your eligibility to use the platform.
- Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data necessary to deliver and record game outcomes. These providers operate under their own privacy frameworks.
- Fraud and security vendors: Specialist third-party services may receive technical and behavioural data to assist in detecting fraudulent activity, account takeovers, and money laundering attempts.
- Legal and regulatory authorities: badbdt may be required by law, court order, or regulatory direction to disclose personal data to law enforcement agencies or other competent authorities. We will comply with such requirements to the extent mandated by applicable law.
- Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of badbdt's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
All third-party service providers engaged by badbdt are contractually required to handle personal data in a manner consistent with this Policy and to implement appropriate security measures.
badbdt uses cookies and similar tracking technologies to operate the platform, maintain your session, and gather analytical data about how the platform is used. The following types of cookies may be set when you visit badbdt:
- Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without preventing you from using the platform.
- Functional cookies: Remember your preferences such as language settings, display options, and last visited games to personalise your experience.
- Analytical cookies: Collect anonymised or aggregated data about how users navigate the platform — pages visited, session duration, game preferences — to help badbdt improve the service.
- Security cookies: Used to detect and prevent fraudulent activity, identify unusual login patterns, and protect your account from unauthorised access.
You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may impair the functionality of the badbdt platform. badbdt does not use third-party advertising cookies or allow external advertising networks to track your behaviour across other websites through our platform.
badbdt retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and record-keeping obligations. The following general retention principles apply:
- Active accounts: Personal data is retained for the full duration of your registered account with badbdt.
- Closed accounts: Following account closure, badbdt retains identity, financial transaction, and KYC records for a minimum period as required by applicable anti-money laundering legislation. This period is typically five (5) years from the date of account closure, unless a longer period is required by law.
- Support communications: Customer support records, including chat transcripts and email correspondence, are retained for a period sufficient to resolve disputes and fulfil complaint-handling obligations.
- Technical and usage data: Server logs and session data are retained for a shorter period consistent with security monitoring and fraud investigation requirements, after which they are deleted or anonymised.
When personal data is no longer required, badbdt applies secure deletion procedures to ensure it cannot be recovered or reconstructed.
badbdt implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:
- SSL/TLS encryption: All data transmitted between your device and the badbdt platform is encrypted in transit using industry-standard SSL/TLS protocols.
- Encrypted storage: Sensitive personal data, including identity documents and financial records, is encrypted at rest using strong encryption standards.
- Access controls: Access to personal data is restricted to authorised badbdt personnel and service providers on a strict need-to-know basis. All access is logged and monitored.
- Account security: Passwords are stored as salted hashes and are never stored or transmitted in plaintext. Players are encouraged to use strong, unique passwords and to enable any additional account security features available.
- Intrusion detection: badbdt employs continuous monitoring systems to detect and respond to potential security incidents in real time.
Your Responsibility: While badbdt takes extensive steps to secure your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect unauthorised access to your account, contact
[email protected] immediately.
Subject to applicable law and the conditions set out in this Policy, you have the following rights in relation to your personal data held by badbdt:
- Right of access: You may request a copy of the personal data badbdt holds about you, along with information about how it is processed.
- Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated. Minor corrections (such as updating your contact email) can be made directly from your account settings.
- Right to erasure: You may request that badbdt delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. This right is subject to overriding legal retention obligations.
- Right to restrict processing: You may request that badbdt temporarily restrict the processing of your data — for example, while the accuracy of that data is being contested.
- Right to data portability: Where processing is based on your consent or on contractual necessity and carried out by automated means, you may request that your data be provided to you in a structured, commonly used, and machine-readable format.
- Right to withdraw consent: Where badbdt processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
- Right to object: You may object to the processing of your personal data where badbdt relies on legitimate interests as the legal basis, including objections to direct marketing communications.
To exercise any of the above rights, please contact the badbdt privacy team at [email protected] with the subject line "Data Rights Request". badbdt will respond to your request within a reasonable timeframe and in accordance with applicable legal requirements.
The badbdt platform is strictly intended for adults aged 18 and above. badbdt does not knowingly collect or process personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor has provided personal data to badbdt or has accessed the platform, please contact us immediately at [email protected].
Upon receiving a verified notification that personal data belonging to a minor has been collected, badbdt will take prompt steps to delete that data and close any associated account. Age verification checks are conducted as part of the account registration and withdrawal processes to minimise the risk of underage access.
The badbdt platform may contain references to or integrations with third-party services, including payment gateways and game content providers. These third parties operate under their own independent privacy policies, and badbdt does not accept responsibility for the data practices of any third-party service.
We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of badbdt, including your mobile financial service provider (bKash, Nagad, Rocket, Upay) and any cryptocurrency wallet or exchange you use to fund your account.
badbdt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, the updated Policy will be published on this page with a revised effective date. Where practicable, registered users will be notified of significant changes via email or an in-platform notification.
Your continued use of the badbdt platform after the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should discontinue use of the platform and may request account closure by contacting [email protected].
If you have any questions, concerns, or requests relating to this Privacy Policy or the way badbdt handles your personal data, please reach out to our support team using the contact details below. Our team operates in Bangladesh Standard Time (BST, UTC+6) and aims to respond to all privacy-related enquiries within five (5) business days.
- Email: [email protected]
- Live Chat: Available 24/7 via the badbdt platform
- Support Language: English and Bengali
- Hours: Around the clock, Bangladesh Standard Time (BST, UTC+6)