bdta1 Privacy Policy

1 Introduction

bdta1 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://bdta1.io (the "Platform"). This Privacy Policy describes how bdta1 collects, uses, stores, shares, and protects personal data provided by or collected about individuals who register, access, or use the Platform ("Players" or "you").

By registering an account on the bdta1 Platform or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy forms part of bdta1's Terms & Conditions, available at /terms-conditions. Any capitalised terms used but not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

We are committed to handling your personal data responsibly, transparently, and in accordance with generally accepted data protection principles. If you have any questions about how we process your data, please contact us at [email protected] before using the Platform.

2 Data We Collect

bdta1 collects the following categories of personal data from Players and prospective Players. We collect only the data that is necessary for the purposes described in this Policy.

2.1 Identity & Registration Data

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify you are 21 years of age or older)
• Gender (optional, for account personalisation)
• Nationality and country of residence
• Username chosen at registration

2.2 Contact Data

• Email address
• Mobile phone number (used for account security and OTP verification)
• City or district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)

2.3 KYC & Identity Verification Documents

• Scanned or photographed copy of a valid National Identity Card (NID), Bangladeshi passport, or driving licence
• Proof of address documentation (e.g., recent utility bill or bank statement dated within the past three months)
• Proof of payment method (e.g., screenshot of the registered bKash, Nagad, or Rocket account matching the Player's name)
• Selfie or liveness check photograph (where required by our KYC partner)

2.4 Financial & Transaction Data

• Deposit and withdrawal amounts (denominated in BDT)
• Payment method identifiers (e.g., registered bKash mobile number, Nagad account number, Rocket account number, Upay reference, bank account number)
• Transaction reference numbers and timestamps
• Wallet balance history and bonus credit records

2.5 Gaming & Betting Activity Data

• Game sessions played (titles, studios, duration)
• Wager amounts, results, and winnings records
• Sports bets placed, including markets, odds, and outcomes
• Bonus offers claimed and wagering requirement progress
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)

2.6 Technical & Device Data

• IP address at time of login and during active sessions
• Device type, operating system, and browser version
• Mobile network operator (where applicable)
• Session timestamps and duration
• Geolocation data (country and region level, derived from IP address)

2.7 Communications Data

• Content of support tickets, live chat transcripts, and email correspondence submitted to bdta1's support team
• Survey responses and feedback submitted voluntarily
• Marketing preference records (opted-in or opted-out)

3 How We Collect Data

bdta1 collects personal data through the following channels and methods:

3.1 Directly from You

The majority of the personal data we hold is provided directly by you at the time of registration, during the KYC verification process, when you make deposits or withdrawals, when you contact our support team, or when you respond to surveys or promotional communications.

3.2 Automatically During Platform Use

When you access and use the bdta1 Platform, we automatically collect technical and usage data through server logs, session tracking systems, and cookies (see Section 7 — Cookies & Tracking). This data is collected passively as a by-product of your interaction with the Platform and does not require you to provide it actively.

3.3 From Third-Party Service Providers

We may receive personal data about you from third parties in the following circumstances:

• KYC verification partners: Identity verification services that cross-reference the documents you submit against official databases to confirm your identity and age.
• Payment processors: bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners may share transaction confirmation data with us to reconcile deposits and withdrawals.
• Fraud prevention services: Third-party risk and fraud detection tools that flag potentially suspicious account activity based on behavioural or device signals.
• Game studios: Game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may share session-level data with us for the purposes of fair-play auditing and dispute resolution.

4 Purposes of Processing

bdta1 processes your personal data only for clearly defined, legitimate purposes. The following table summarises the primary purposes for which each category of data is used.

bdta1 does not use your personal data for automated individual decision-making that produces significant legal effects, except where such processing is necessary for KYC verification and fraud prevention purposes, in which case you retain the right to request human review of any automated decision.

5 Legal Basis for Processing

bdta1 processes personal data on one or more of the following legal bases depending on the specific purpose of processing:

• Contract Performance: Processing is necessary to perform the contract between bdta1 and the Player — for example, operating your account, processing BDT transactions, and delivering gaming services.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including age verification, anti-money-laundering checks, and responsible gaming obligations.
• Legitimate Interests: Processing is necessary for purposes of bdta1's legitimate interests, such as fraud prevention, platform security, and improving the quality of our services, where those interests are not overridden by your fundamental rights.
• Consent: Where processing is based on your consent — most notably for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, contact [email protected] or use the unsubscribe option in any marketing email.

6 Data Sharing & Disclosure

6.1 Payment Processing Partners

To process deposits and withdrawals in BDT, bdta1 shares limited financial and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners receive only the data necessary to execute and verify the relevant transaction and are contractually bound to process it solely for that purpose.

6.2 KYC and Identity Verification Providers

KYC document data is shared with our identity verification partners, who cross-reference it against official records to confirm your identity and age. These partners are required to maintain strict data security standards and are prohibited from using your data for any purpose other than identity verification on behalf of bdta1.

6.3 Game Studios and Technology Providers

Certain gaming activity data (such as session identifiers, Wager amounts, and round results) is shared with game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — for fair-play auditing, game integrity monitoring, and technical dispute resolution purposes.

6.4 Fraud Prevention and Security Services

Technical and device data may be shared with third-party fraud detection and cybersecurity services to identify and prevent unauthorised access, account takeover, bonus abuse, and other forms of platform fraud.

6.5 Legal and Regulatory Disclosure

bdta1 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required or compelled to do so, or where disclosure is necessary to protect the rights, safety, or property of bdta1, its Players, or the public.

6.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the assets of bdta1, personal data held by bdta1 may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy terms via email or an in-platform notification prior to your data being subject to a different privacy policy.

7 Cookies & Tracking Technologies

The bdta1 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to keep you securely logged in across your session, and to analyse usage patterns that inform service improvements.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to operate. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without impacting your ability to use the Platform.
• Functional Cookies: Remember your preferences such as language display settings and notification preferences to provide a more personalised experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how Players navigate and interact with the Platform. This data is used solely to improve the Platform's usability and performance. No individual Player is identifiable from analytics data in isolation.
• Security Cookies: Used to detect and flag unusual login behaviour, suspected account sharing, and other security anomalies. These cookies are essential to the Platform's fraud prevention systems.

7.2 Managing Cookies

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in to and use the Platform. Disabling functional or analytics cookies will not prevent you from accessing the Platform but may reduce the personalisation of your experience. Instructions for managing cookies in common browsers are available from the respective browser's help documentation.

7.3 No Cross-Site Tracking

bdta1 does not use advertising network cookies, pixel trackers, or any tracking technology that shares your browsing behaviour with advertising networks or social media platforms outside of the bdta1 domain.

8 Data Retention

bdta1 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

9 Data Security

bdta1 implements the following technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in Transit: All connections to the bdta1 Platform are enforced over HTTPS using TLS 1.2 or higher. Unencrypted HTTP connections are automatically redirected.
• Encryption at Rest: Sensitive data fields — including KYC document files, payment method identifiers, and authentication credentials — are stored using AES-256 encryption.
• Access Controls: Internal access to personal data is governed by role-based access controls (RBAC). Staff members access only the data necessary for their specific function.
• Password Security: Player passwords are stored as salted cryptographic hashes. bdta1 staff have no ability to view plain-text passwords at any time.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts to add an additional layer of login security. bdta1 internal systems require 2FA for all staff with access to personal data.
• Vulnerability Management: The bdta1 Platform undergoes regular security assessments. Identified vulnerabilities are triaged and remediated according to severity level.
• Incident Response: In the event of a data breach that poses a material risk to Players, bdta1 will notify affected Players promptly and take immediate containment and remediation steps.

While bdta1 takes all reasonable precautions to protect your personal data, no internet-based system is entirely immune to security threats. Players are responsible for maintaining the security of their own account credentials and should contact [email protected] immediately if they suspect unauthorised access to their account.

10 Your Data Rights

As a registered Player, you hold the following rights with respect to your personal data held by bdta1. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and your registered account username. bdta1 will respond within 30 days of receiving a valid request.

11 Children's Privacy & Under-21 Policy

bdta1 enforces a strict minimum age requirement of 21 years for all registered Players. Age verification is conducted as a mandatory part of the KYC process using government-issued identity documents. Any account found to belong to a person under the age of 21 will be immediately suspended, all associated data preserved for compliance purposes, and a report filed where legally required.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on the bdta1 Platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action including account closure and data deletion to the extent permitted by our legal obligations.

We encourage parents and guardians to make use of parental control software to restrict access to online gambling platforms for individuals in their care who are under the minimum age.

12 Third-Party Links & Integrated Services

The bdta1 Platform integrates with third-party services — most notably game studios and payment providers — that operate under their own privacy policies and data protection practices. While bdta1 takes reasonable care in selecting partners who maintain adequate data protection standards, we are not responsible for the privacy practices of external services.

The game studio interfaces embedded within the bdta1 Platform (such as Evolution Gaming's live dealer environment, Pragmatic Play's game client, and Spribe's Aviator interface) operate under the data practices of their respective studios. Game studios may process session-level data independently of bdta1 for their own fair-play and integrity purposes. We recommend reviewing the privacy policies of game studios if you have questions about their specific data handling practices.

bdta1 does not host third-party advertising networks and does not embed social media sharing widgets on the Platform. No social media tracking pixels are present on any page of the bdta1 Platform.

13 Updates to This Privacy Policy

bdta1 reserves the right to update or revise this Privacy Policy at any time. Where updates are material — for example, where we introduce a new category of data processing or a new type of third-party data sharing — we will provide reasonable advance notice to registered Players via email to the address on file or via a prominent in-platform notification prior to the change taking effect.

The effective date displayed at the top of this document will be updated to reflect the date on which the revised Policy takes effect. We encourage you to review this Privacy Policy periodically to remain informed about how we handle your personal data.

Continued use of the bdta1 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Privacy Policy, you must cease using the Platform and request account closure in accordance with the Terms & Conditions.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdta1 handles your personal data, please contact our support team through the following channels:

• Email: [email protected] — include the subject line "Privacy Policy Enquiry" or "Data Rights Request" for faster routing.
• Live Chat: Available directly on the bdta1 Platform, 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6).
• Response Time: We aim to respond to all data rights requests within 30 calendar days of receipt of a valid, complete request.