bd1k Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") describes how bd1k ("bd1k", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "the player", "the user") who access or use the bd1k online betting and casino platform, including the website at bd1k.io, any related mobile-optimised interfaces, and all associated services.

bd1k is committed to protecting the privacy and personal data of every player on its platform. We operate the bd1k platform for players across Bangladesh, and we understand that the responsible handling of personal information is a condition of the trust our players place in us. This Policy has been written in plain, accessible English to ensure that every player — regardless of technical background — can clearly understand their rights and our obligations.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are available on this site. Together, these documents form the complete framework governing your relationship with bd1k.

Where we refer to "personal data" in this Policy, we mean any information that relates to an identified or identifiable natural person. This includes obvious identifiers such as your name and email address, as well as less obvious information such as your IP address and betting history where that information can be linked back to you as an individual.

2 Data We Collect

bd1k collects personal data through several channels: directly from you when you register an account or use our services, automatically through your use of the platform, and from third parties involved in the delivery of our services (such as payment processors and identity verification providers). The categories of data we collect are set out below.

2.1 Registration & Identity Data

When you create a bd1k account, we collect the following information:

• Full legal name
• Date of birth (used to verify you meet the 21+ age requirement)
• Residential address, including city and district (e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Email address
• Mobile phone number
• Username and encrypted password

2.2 KYC Verification Data

To comply with our identity verification obligations, we may collect:

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documentation (utility bills, bank statements, official correspondence)
• Selfie or video verification images where requested
• Proof of payment method ownership (e.g., bKash or Nagad account screenshots)

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (mobile money account numbers, crypto wallet addresses)
• Transaction reference numbers
• Account balance history

2.4 Gameplay & Betting Data

• Betting history across all sports markets (cricket, football, kabaddi, and others)
• Casino game session data (games played, stakes, outcomes)
• Bonus and promotion participation records
• Responsible gaming tool usage (deposit limits, self-exclusion records)

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps and duration
• Referring URL and on-site navigation path
• Cookie identifiers and similar tracking technologies (see Section 6)

2.6 Communications Data

• Support ticket content and chat transcripts
• Email correspondence with the bd1k support team
• Survey responses and feedback submissions

3 How We Use Your Data

The personal data we collect is used exclusively for the purposes described below. We do not use your data for purposes incompatible with those for which it was originally collected without first obtaining your explicit consent.

Where we wish to use your data for a new purpose not listed above, we will update this Policy and, where required by applicable law, seek your consent before proceeding.

4 Legal Basis for Processing

bd1k processes personal data on the following legal grounds, depending on the specific purpose for which the data is being used:

• Contractual necessity: Processing your registration data, KYC documents, financial data, and gameplay data is necessary to perform the contract between you and bd1k — namely, to provide you with the online betting and casino services you have signed up for.
• Legal obligation: Certain processing activities — particularly identity verification, age verification, and the retention of transaction records — are required by applicable anti-money laundering and know-your-customer regulations.
• Legitimate interests: We process technical and device data, fraud signals, and aggregated usage analytics to protect the security and integrity of the platform, prevent fraudulent activity, and improve the overall user experience for all bd1k players.
• Consent: Where we send optional marketing communications or deploy non-essential tracking cookies, we do so only on the basis of your consent, which you may withdraw at any time.

5 Data Sharing

bd1k does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

5.1 Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the bd1k platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and cryptocurrency processing partners receive the transaction data necessary to complete deposits and withdrawals.
• Identity verification providers: Third-party KYC platforms that verify the authenticity of identity documents and perform age verification checks.
• Fraud prevention services: Specialist providers that analyse device fingerprints, IP data, and behavioural signals to detect and prevent fraudulent account activity.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and anonymised gameplay data necessary to deliver and audit their games on our platform. These providers do not receive your full identity data.
• Cloud infrastructure and hosting providers: The technical infrastructure on which the bd1k platform runs, subject to strict data processing agreements.

All third-party service providers are contractually required to process your data only for the specific purpose for which it was shared, to maintain appropriate security standards, and to comply with applicable data protection law.

5.2 Legal and Regulatory Disclosure

bd1k may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised authorities where required to do so by applicable law, court order, or legal process. We will, where permitted by law, notify you of such a disclosure request before complying.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the bd1k business, your personal data may be transferred to the relevant successor entity. We will notify you of any such transfer and ensure that appropriate data protection standards continue to apply.

6 Cookies & Tracking Technologies

bd1k uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain session security, and to understand how players interact with the site. The following categories of cookies are used on the bd1k platform:

• Strictly necessary cookies: Required for the platform to operate. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display preferences to provide a more personalised experience. Disabling these cookies may affect the quality of your experience.
• Analytics cookies: Collect anonymised data about how visitors use the bd1k platform — such as which pages are most visited, how long sessions last, and where users navigate within the site. This data is used in aggregate form to improve the platform.
• Security and fraud prevention cookies: Used by our fraud detection systems to analyse device and behavioural signals that may indicate account compromise or fraudulent activity.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your bd1k account or using core platform features. Disabling analytics cookies will not affect your ability to use the platform but will limit our ability to identify areas for improvement.

bd1k does not use third-party advertising cookies or behavioural targeting cookies that track your activity across other websites.

7 Data Retention

bd1k retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal obligations. The following retention periods apply as a general guide:

When data is no longer required and the applicable retention period has expired, bd1k will securely delete or anonymise it in a manner that prevents reconstruction of the original personal data.

8 Security Measures

bd1k takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect it against unauthorised access, disclosure, alteration, or destruction. Our security framework includes the following:

• TLS/SSL encryption: All data transmitted between your device and the bd1k platform is encrypted using Transport Layer Security (TLS). Our site operates exclusively over HTTPS.
• Encryption at rest: Sensitive data stored in our databases — including identity documents and payment identifiers — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within bd1k's internal systems is restricted on a strict need-to-know basis. All staff with data access privileges are subject to confidentiality obligations and regular security training.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a strong, salted hashing algorithm before storage.
• Intrusion detection: Our infrastructure is monitored continuously for signs of unauthorised access or anomalous activity. Security incidents are escalated through a defined incident response protocol.
• Third-party security audits: bd1k engages independent security professionals to conduct periodic reviews of our infrastructure and data handling practices.

While bd1k implements robust security measures, no online platform can guarantee absolute security against all possible threats. You play an important role in keeping your account secure by using a strong, unique password and reporting any suspicious account activity to our support team immediately.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, bd1k will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

9 Your Rights

As a player on the bd1k platform, you have a number of rights in relation to your personal data. These rights are summarised below. To exercise any of these rights, please contact the bd1k support team at [email protected] with a clear description of your request and sufficient information to verify your identity.

bd1k will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for responding to data rights requests unless a request is manifestly unfounded or excessive.

Please note that certain rights — particularly the right to erasure — may be limited where bd1k has a legal obligation to retain your data (for example, for anti-money laundering compliance). In such cases, we will explain the applicable limitation clearly in our response.

10 Children's Privacy

The bd1k platform is strictly for adults aged 21 years and over. bd1k does not knowingly collect or process personal data from individuals under the age of 21. If you are under 21, you must not register an account, place any bet, or use any service offered by bd1k.

If bd1k becomes aware that it has collected personal data from an individual under the age of 21, we will take immediate steps to close the relevant account and delete the associated data. If you are a parent or guardian and believe that a minor has registered an account on the bd1k platform, please contact our support team at [email protected] immediately so that we can investigate and take appropriate action.

11 Third-Party Links

The bd1k platform may contain references to third-party services, game providers, or payment processors. This Privacy Policy applies only to data processed by bd1k and does not extend to third-party websites or services that may be accessible from or referenced within the bd1k platform. bd1k has no control over the privacy practices of third-party entities and is not responsible for their data handling.

We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of bd1k, including your chosen payment provider (such as bKash, Nagad, or Rocket) and any game studio whose content you access through our platform.

12 Policy Updates

bd1k reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered players by email or by displaying a prominent notice on the bd1k platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page alongside the effective date. We encourage you to review this Policy periodically to stay informed about how bd1k protects your personal data. Your continued use of the bd1k platform after any updated version of this Policy has been published constitutes your acceptance of the revised terms.

If we make changes that require your consent under applicable law — such as introducing a new purpose for processing your data — we will seek that consent before the new processing begins and will provide you with a clear opportunity to withdraw consent without detriment to your account.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to bd1k's handling of your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, to assist players across Bangladesh with any data protection enquiry.

When submitting a data rights request, please include your registered username, the email address associated with your bd1k account, a clear description of the right you wish to exercise, and any relevant context that will help us locate and process your request efficiently. We may ask for additional identity verification before processing requests that involve access to or deletion of account data.