bdt6999 Privacy
Policy

1.1 Information You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, or contact our customer support team, you provide bdt6999 with personal information directly. The categories of personal data collected through these interactions include:

• Identity data: Full legal name, date of birth, gender, and nationality as stated on your government-issued identification document.
• Contact data: Email address, mobile phone number, and residential address (city, district, and division within Bangladesh, or full postal address for international players).
• Identification documents: Copies of your National Identity Card (NID), passport, or driving licence submitted during the KYC verification process.
• Financial data: Mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) used to make deposits or receive withdrawals. Note that bdt6999 does not store full card numbers — payment card data is tokenised by our payment processing partners.
• Communications data: Records of your interactions with bdt6999 customer support via live chat, email at [email protected], or WhatsApp, including chat transcripts and email correspondence.

1.2 Information Collected Automatically

When you access and use the bdt6999 platform — whether via a desktop browser or mobile device — certain technical and behavioural data is collected automatically by our systems. This includes:

• Device data: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Network data: IP address, mobile network operator, and approximate geographic location derived from your IP address.
• Usage data: Pages visited, features accessed, games played, bets placed, session duration, click patterns, and navigation paths within the platform.
• Transaction data: Records of all deposits, withdrawals, bets, game rounds, bonus claims, and promotional interactions associated with your account.

1.3 Information from Third Parties

bdt6999 may receive personal data about you from third-party sources in connection with the operation of the platform. These sources include:

• Payment processors: Confirmation of transaction status, payment method verification results, and fraud signals from mobile banking operators and card payment gateways.
• Identity verification services: Results from automated document verification or database cross-checks used to support the KYC process.
• Analytics providers: Aggregated and pseudonymised behavioural data from analytics tools used to measure platform performance and improve user experience.

bdt6999 does not sell, rent, or trade your personal data to any third party. We share personal information only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Processing Partners

To process deposits and withdrawals, bdt6999 shares relevant financial and identity data with our payment processing partners, including mobile banking operators (bKash, Nagad, Rocket, Upay), banking institutions (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and international card payment gateways (Visa, Mastercard networks). Each payment partner is contractually required to handle your data in accordance with applicable data protection standards and is prohibited from using it for their own marketing purposes.

3.2 Identity Verification Providers

During the KYC verification process, bdt6999 may share copies of your identity documents with specialist third-party identity verification service providers. These providers perform document authenticity checks and database cross-references on our behalf and are bound by strict data processing agreements that limit their use of your data to the verification purpose only.

3.3 Technology and Platform Providers

bdt6999 uses third-party technology providers to operate and maintain the platform, including cloud hosting infrastructure, customer support tools, live chat software, and analytics platforms. These providers act as data processors on bdt6999's behalf and are permitted to access your personal data only to the extent necessary to perform their contracted services. They may not use your data for any independent purpose.

3.4 Game Studios and Content Providers

Games available on the bdt6999 platform are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, certain gameplay data (such as game session identifiers, bet amounts, and round outcomes) is transmitted to the studio's servers to facilitate game operation and resolve disputes. This data sharing is the minimum necessary for game delivery and does not include your full identity or payment details.

3.5 Legal and Regulatory Disclosure

bdt6999 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, where necessary to protect the rights and safety of bdt6999 or its players, or where required in connection with the investigation of fraud, money laundering, or other criminal activity. In such cases, bdt6999 will disclose only the minimum data necessary to satisfy the legal requirement.

bdt6999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework is reviewed and updated regularly in line with industry best practices.

5.1 Technical Security Measures

• SSL/TLS encryption: All data in transit between your device and bdt6999 servers is encrypted using SSL/TLS protocols. Our platform enforces HTTPS on all pages and API endpoints.
• Data encryption at rest: Sensitive personal data stored in our databases — including identity document images, payment account references, and account passwords — is encrypted at rest using industry-standard encryption algorithms.
• Password hashing: Account passwords are never stored in plain text. They are processed using a one-way cryptographic hashing algorithm with a unique salt per user, so that even in the event of a data breach, passwords cannot be recovered in their original form.
• Two-factor authentication (2FA): bdt6999 supports two-factor authentication for account login. Players are strongly encouraged to enable 2FA to add an additional layer of protection against unauthorised access.
• Access controls: Access to personal data by bdt6999 staff is restricted on a strict need-to-know basis. Privileged access to production systems and databases is limited to authorised personnel and is subject to audit logging.

5.2 Organisational Security Measures

All bdt6999 personnel who handle personal data are subject to confidentiality obligations and receive regular training on data protection responsibilities. Our internal data handling procedures are documented, regularly reviewed, and tested. Third-party service providers who process data on bdt6999's behalf are subject to contractual security requirements and periodic vendor assessments.

5.3 Data Breach Response

In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of affected players, bdt6999 will notify the affected individuals without undue delay, providing details of the nature of the breach, the categories of data involved, and the steps we are taking to address it. bdt6999 maintains an incident response plan that is activated immediately upon detection of a suspected breach.

5.4 Your Role in Account Security

While bdt6999 takes extensive steps to protect your data on its side, account security is a shared responsibility. You are strongly advised to use a strong, unique password for your bdt6999 account, to enable two-factor authentication, to log out of your account when using a shared or public device, and to notify bdt6999 immediately at [email protected] if you suspect that your account has been accessed without your authorisation.

As a registered player on bdt6999, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our data protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five business days and provide a substantive response within 30 days.

7.1 Right of Access

You have the right to request a copy of the personal data that bdt6999 holds about you. This is sometimes called a Subject Access Request (SAR). Upon receipt of a valid SAR, bdt6999 will provide you with a summary of the personal data categories we hold, the purposes for which they are processed, and, where technically feasible, a copy of the data itself in a structured, readable format.

7.2 Right to Rectification

If any personal data held by bdt6999 about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many account details — such as your email address or mobile number — directly through your account settings. For data that requires document verification to correct (such as your legal name or date of birth), please contact support with the relevant supporting documentation.

7.3 Right to Erasure

You have the right to request that bdt6999 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes it was collected, or where you have withdrawn your consent and there is no other legal basis for continued processing. This right is not absolute: bdt6999 may decline deletion requests where retention is required to comply with legal obligations (such as AML record-keeping requirements) or to defend against legal claims.

7.4 Right to Restriction

You have the right to request that bdt6999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing on legitimate interest grounds and we are assessing whether our legitimate interests override your rights.

7.5 Right to Data Portability

Where bdt6999 processes your personal data on the basis of your consent or in performance of a contract, and where the processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format (such as CSV or JSON). This right applies to data that you have actively provided to bdt6999, such as your account registration details and transaction history.

7.6 Right to Object

You have the right to object to the processing of your personal data where bdt6999 relies on legitimate interests as the legal basis for processing. You also have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling carried out for direct marketing. Where you object to marketing processing, bdt6999 will cease that processing immediately.

7.7 Rights Related to Automated Decision-Making

bdt6999 may use automated processes to flag accounts for fraud review, to enforce responsible gaming restrictions, or to apply bonus eligibility rules. Where such automated processing produces a decision that significantly affects you, you have the right to request human review of that decision and to contest its outcome by contacting our support team at [email protected].