bdta1 Privacy Policy

1. Information We Collect

When you register, deposit, play, or interact with the bdta1 platform, we collect personal data that falls into several distinct categories. Understanding exactly what we hold is the first step toward a transparent relationship between bdta1 and every player.

1.1 Registration Data

When you create a bdta1 account, we collect your full legal name, date of birth, residential address, email address, and a valid Bangladeshi mobile number. This information is required to open your account, verify your identity, and ensure you meet our minimum age requirement of 18 years.

1.2 Identity Verification (KYC) Documents

To comply with our Know Your Customer (KYC) obligations and to process withdrawals, we may request copies of the following documents:

• National Identity Card (NID) or passport
• Recent utility bill or bank statement confirming residential address (issued within 90 days)
• Photograph or selfie for facial liveness verification
• Screenshot or confirmation of the payment method used for deposits (e.g., bKash account number confirmation)

These documents are processed and stored securely, accessed only by authorised personnel, and are never shared with third parties outside of regulated verification service providers.

1.3 Financial Transaction Data

Each deposit and withdrawal on bdta1 generates a transaction record that includes the amount in BDT, the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), the transaction timestamp, and the transaction reference number. Full card numbers and MFS PINs are never stored by bdta1 — payment processing is handled by our PCI-DSS compliant payment partners.

1.4 Gameplay & Betting Data

bdta1 records all game sessions, wager amounts, game outcomes, sports betting selections, and account balance movements. This data serves operational purposes including dispute resolution, fraud detection, responsible gaming monitoring, and game performance analytics. Gameplay data is linked to your account for the duration of your membership.

1.5 Technical & Device Data

When you access bdta1, our servers automatically collect technical data including your IP address, browser type and version, operating system, device type (mobile or desktop), session duration, and pages visited. This data is used for platform security, fraud detection, and aggregate traffic analytics.

1.6 Communications Data

If you contact bdta1 support via live chat, email, or any other channel, we retain the content of those communications, the date and time of contact, and any reference numbers generated. This data is used to resolve queries, improve our support quality, and maintain an audit record of player interactions.

2. How We Use Your Data

bdta1 processes your personal data only for clearly defined, lawful purposes. The table below summarises the primary uses of your data and the legal basis under which each processing activity is conducted.

bdta1 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for risk assessment, the final decision to restrict or close the account is always reviewed by a member of our compliance team.

3. Data Sharing & Third Parties

bdta1 does not sell, rent, or otherwise transfer your personal data to any third party for their own marketing or commercial purposes. Data is shared only in the following specific, controlled circumstances:

3.1 Payment Processing Partners

To facilitate deposits and withdrawals in BDT, bdta1 works with regulated mobile financial service providers including bKash, Nagad, Rocket, and Upay, as well as card processing networks (Visa and Mastercard). These partners receive only the transaction data necessary to execute the specific payment instruction. They are contractually prohibited from using your data for any other purpose.

3.2 KYC & Identity Verification Services

To verify your identity and age, bdta1 uses regulated third-party KYC service providers. Your submitted identity documents are transmitted securely to these services via encrypted API. These providers operate under strict data processing agreements and are prohibited from retaining your documents beyond the verification period.

3.3 Game Software Providers

Casino games hosted on bdta1 are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a pseudonymous player identifier and session token to enable gameplay, but they do not receive your full name, address, or payment details.

3.4 Legal & Regulatory Disclosure

In limited circumstances, bdta1 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies when compelled by a lawful order or legal obligation. bdta1 will notify affected players of such disclosure wherever legally permissible to do so.

4. Cookies & Tracking Technologies

The bdta1 platform uses cookies and similar client-side storage technologies to deliver a functional, personalised, and secure experience. The following categories of cookies are in use on bdta1:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, carry your authentication token between pages, and remember your language and currency preferences. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised, aggregated data about how players navigate the bdta1 platform — which pages are visited most, where users exit, and how long sessions last. This data is used exclusively to improve the platform. No individual player is identified from analytics data.
• Functional Cookies: These cookies remember optional settings you have configured, such as your preferred table stakes in casino games or your default deposit method. Disabling these cookies will not break core functionality but will reset your preferences on each visit.
• Security Cookies: Short-lived tokens used to detect and prevent cross-site request forgery (CSRF) attacks, session hijacking, and other common web security threats. These are automatically generated per session and expire immediately when you log out.

You can manage cookie preferences from your device's browser settings. Note that disabling strictly necessary or security cookies will affect your ability to log in and use core platform features. bdta1 does not use third-party advertising or retargeting cookies.

5. Data Retention & Storage

bdta1 retains personal data only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

All bdta1 player data is stored on secure servers. Access is restricted to authorised personnel only, and all internal access events are logged for audit purposes. When data reaches the end of its retention period, it is securely deleted using methods that render recovery impossible, or it is irreversibly anonymised and retained solely for aggregate statistical purposes.

6. Security Measures

Keeping your personal data secure is not merely a legal requirement for bdta1 — it is a core operational value. We implement a layered security architecture that combines technical controls, access management, and regular independent testing.

• 256-bit SSL/TLS Encryption: All data in transit between your device and bdta1 servers is encrypted using current-generation TLS protocols. Our SSL certificate is validated and renewed automatically.
• AES-256 Encryption at Rest: Sensitive stored data, including identity documents and financial records, is encrypted at rest using AES-256 block cipher encryption.
• Multi-Factor Authentication: Player accounts support SMS OTP-based two-factor authentication (2FA). Our internal administrative systems require mandatory 2FA for all staff.
• Access Controls: Access to player personal data is strictly role-based. Only personnel with a legitimate operational need can access identifiable player records, and all access events are logged in an immutable audit trail.
• Regular Penetration Testing: bdta1's platform undergoes periodic security penetration testing conducted by independent third-party security firms. Critical vulnerabilities are patched on an emergency basis; non-critical issues are remediated within defined SLA windows.
• Intrusion Detection: Automated intrusion detection and anomaly monitoring systems run continuously across bdta1's infrastructure, flagging unusual access patterns for immediate review by our security team.

In the event of a personal data breach that poses a risk to player rights, bdta1 will take immediate containment action and notify affected players without undue delay, including details of what data was involved and what steps are being taken to mitigate the impact.

7. Your Privacy Rights

As a bdta1 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our privacy team at [email protected] with the subject line "Privacy Request — [Right Name]". All requests are acknowledged within 5 business days and resolved within 30 calendar days.

• Right of Access: You may request a copy of all personal data bdta1 holds about you, along with details of how it is being processed and for what purpose.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. This right is subject to overriding legal obligations — for example, financial transaction records must be retained for the legally required period regardless of an erasure request.
• Right to Restriction of Processing: In certain circumstances (e.g., while a dispute is under investigation), you may request that we limit how we process your data rather than deleting it entirely.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to bdta1 (such as account registration data and transaction history), in a format that allows you to transfer it to another service provider.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interest as the legal basis. You may also withdraw consent for marketing communications at any time by updating your preferences in Account Settings or by contacting support.
• Right Not to be Subject to Automated Decisions: Where bdta1 uses automated processing that produces a significant effect on your account (e.g., fraud risk scoring), you have the right to request human review of that decision.

8. Policy Updates & Contact

bdta1 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When a material change is made, we will update the "Last Updated" date at the top of this page and, where the change significantly affects your rights, we will notify you directly via the email address registered to your account.

We encourage all players to review this Privacy Policy periodically. Continued use of the bdta1 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

8.1 How to Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or believe that bdta1 has not handled your personal data in accordance with this Policy, please contact our privacy team:

• Email: [email protected] (subject line: "Privacy Request")
• Live Chat: Available 24/7 from within your bdta1 account dashboard
• Response Time: Acknowledgement within 5 business days; resolution within 30 calendar days

We take all privacy complaints seriously. If you are not satisfied with our response, you retain the right to escalate your complaint to an appropriate data protection authority or seek independent legal advice.

Document version: 1.0  |  Effective: 1 January 2026  |  Applies to: All bdta1 registered players  |  Language: English