bdpk Privacy Policy

1 Data Controller

bdpk is the data controller in respect of all personal data collected through the bdpk platform at bdpk.io. As data controller, bdpk determines the purposes for which personal data is processed and the means by which it is processed. All queries, requests, and complaints relating to your personal data should be directed to bdpk's data support team at [email protected].

bdpk operates as an offshore online gaming platform. The platform is designed to serve English-speaking players in the Bangladesh market. Where applicable local data protection frameworks impose additional obligations, bdpk will endeavour to meet those obligations to the extent reasonably practicable for an offshore operator.

2 Data We Collect

bdpk collects the following categories of personal data in the ordinary course of providing its services:

2.1 Identity Data

Full legal name, date of birth, nationality, and government-issued identification number (from National ID Card, passport, or driving licence submitted during KYC verification).

2.2 Contact Data

Email address, mobile phone number, and any correspondence you send to bdpk's support team via any channel.

2.3 Account Data

Username, encrypted password, account creation date, account status, login history (timestamps and IP addresses), and any account preferences or settings you configure.

2.4 Financial Data

Records of all deposits, withdrawals, wagers placed, and game outcomes associated with your account. Payment method identifiers (for example, the registered mobile number associated with a bKash or Nagad account, or a masked bank account reference). We do not store full mobile banking PINs or full bank account credentials.

2.5 Technical Data

IP address, device type, operating system, browser type and version, screen resolution, time-zone setting, referral URL, session duration, pages visited within the platform, and other diagnostic data collected automatically when you access bdpk.

2.6 Responsible Gaming Data

Records of any responsible gaming tool you have activated, including deposit limits, session time limits, cool-off periods, and self-exclusion requests. This data is processed strictly for your protection and is never used for marketing profiling.

2.7 Communications Data

Records of all support tickets, live chat transcripts, emails, and other correspondence between you and bdpk's customer support team, retained for quality assurance and dispute resolution purposes.

3 How We Collect Data

3.1 Directly From You

The majority of personal data bdpk holds is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, place a wager, activate a responsible gaming tool, contact customer support, or respond to a promotional offer.

3.2 Automatically

Technical and behavioural data is collected automatically through server logs, cookies, and similar tracking technologies when you access and use the bdpk platform. This data collection is necessary for platform security, fraud prevention, and service optimisation. Please refer to Section 8 (Cookies & Tracking) for further detail.

3.3 From Third Parties

In limited circumstances, bdpk may receive personal data about you from third parties, including:

• Payment service providers (bKash, Nagad, Rocket, Upay, and partner banks) who confirm transaction status and, where applicable, payment account ownership.
• Identity verification service providers engaged to assist with KYC compliance.
• Fraud detection and anti-money-laundering screening services.
• Analytics providers who supply aggregated, pseudonymised behavioural data to help bdpk improve platform performance.

4 Legal Basis for Processing

bdpk processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing required to create and manage your account, process deposits and withdrawals, settle bets, and deliver the services described in bdpk's Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering obligations, fraud prevention requirements, age verification duties, and any regulatory demands placed on the platform.
• Legitimate Interests: Processing carried out in bdpk's legitimate business interests, including platform security monitoring, fraud detection, responsible gaming compliance, customer support quality assurance, and aggregate analytics — provided that such interests are not overridden by your own data protection rights.
• Consent: Processing of personal data for optional purposes — primarily the delivery of marketing communications (email, SMS, in-platform notifications) — where you have given explicit, freely withdrawable consent. You may withdraw this consent at any time without affecting your ability to use the platform.

5 How We Use Your Data

bdpk uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining, verifying, and closing player accounts; authenticating logins; and managing account security settings.
• Transaction Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks; issuing winnings; and maintaining accurate financial records for each account.
• Identity Verification: Conducting age verification and KYC checks to confirm that players are aged 21 or above and that identity documents are authentic.
• Fraud Prevention & Security: Detecting and investigating suspicious account activity, unauthorised access, bonus abuse, money laundering indicators, and other forms of prohibited conduct.
• Responsible Gaming: Implementing deposit limits, session reminders, cool-off periods, and self-exclusion measures as requested by players or triggered by bdpk's responsible gaming monitoring systems.
• Customer Support: Responding to account queries, complaints, and dispute resolution requests; maintaining support interaction records for quality assurance.
• Platform Improvement: Analysing aggregated and pseudonymised usage data to identify areas for technical improvement, game performance optimisation, and user experience enhancement.
• Legal Compliance: Meeting record-keeping obligations, responding to lawful requests from authorities, and defending bdpk's legal rights in any dispute.
• Marketing (Consent-Based): Sending promotional offers, bonus notifications, and platform news to players who have opted in to marketing communications. You may opt out at any time.

6 Data Sharing & Disclosure

bdpk does not sell your personal data. We share data with third parties only in the following limited and controlled circumstances:

6.1 Service Providers

bdpk engages carefully selected third-party service providers who process personal data on our behalf under binding data processing agreements. These providers include identity verification services, payment processing partners, cloud hosting providers, fraud detection services, and customer support platform operators. These parties are contractually prohibited from using your data for any purpose other than performing the service for which they were engaged.

6.2 Game Studios

Game providers whose content is offered on the bdpk platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive technical identifiers (such as a pseudonymous player ID and session token) to facilitate game delivery. These providers do not receive your full identity data unless required for their own compliance obligations under their operating licences.

6.3 Legal and Regulatory Authorities

bdpk may disclose personal data to law enforcement agencies, financial intelligence units, or other governmental authorities where we are legally required to do so, or where disclosure is necessary to prevent, detect, or investigate serious crime, money laundering, or fraud.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of bdpk's assets, player personal data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer via the platform and/or by email, and will have the right to request account closure if they do not consent to the transfer of their data to the new entity.

6.5 Aggregate Analytics

bdpk may share aggregated, fully anonymised statistical data with analytics partners or publish it in internal reports. This data contains no information that could be used to identify any individual player.

7 Payment Data

All payment transactions on bdpk are denominated in Bangladeshi Taka (৳) and processed through trusted local and banking partners. bdpk handles payment data with the highest level of care:

• bdpk does not store your full mobile banking PIN, OTP codes, or full internet banking login credentials at any point.
• Payment method identifiers (such as the registered mobile number for a bKash or Nagad account) are stored in encrypted form and used solely to route transactions and process refunds or withdrawals.
• All payment data in transit is protected by SSL/TLS encryption. Payment data at rest is encrypted using AES-256 standard.
• Deposits and withdrawals are processed via direct integration with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Each partner maintains its own privacy and security standards for the portions of the transaction handled within their own systems.
• Transaction records are retained for a minimum of five years to meet anti-money-laundering record-keeping obligations, after which they are securely deleted unless a longer retention period is required by applicable law or an active dispute.

8 Cookies & Tracking

The bdpk platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The following categories of cookies are used:

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent core platform functionality from operating correctly. bdpk does not use cross-site tracking cookies to follow your activity on third-party websites outside of bdpk.io.

9 Data Retention

bdpk retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods:

• Account Data: Retained for the duration of the active account relationship and for a minimum of five years following account closure, in compliance with anti-money-laundering and record-keeping obligations.
• Financial Records: Retained for a minimum of five years from the date of each transaction.
• Identity Verification Documents: Retained for a minimum of five years following account closure or the completion of the KYC process, whichever is later.
• Support Communications: Retained for three years following the closure of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your marketing consent and for one year following withdrawal of consent, as evidence of the consent transaction.
• Technical / Log Data: Typically retained for 12 months in rolling logs, after which it is aggregated into anonymised statistical form or deleted.

At the end of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be associated with any identifiable individual. Where deletion is temporarily delayed due to an active dispute, legal hold, or regulatory investigation, bdpk will notify the player where practicable.

10 Data Security

bdpk implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. Key security measures include:

• SSL/TLS encryption for all data in transit between your device and bdpk's servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment method records.
• Bcrypt-hashed password storage — bdpk never stores plaintext passwords.
• Role-based access controls limiting internal access to personal data to authorised personnel only, on a strict need-to-know basis.
• Two-factor authentication (2FA) requirements for internal staff accessing sensitive systems.
• Regular independent security assessments and penetration testing of the platform infrastructure.
• Automated intrusion detection and real-time alerting for suspicious access patterns.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bdpk will notify affected players promptly and take all available remedial steps. If you suspect that your bdpk account has been compromised, contact our support team immediately at [email protected].

11 Your Rights

As a player on the bdpk platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact bdpk's support team at [email protected]. All requests will be acknowledged within 5 business days and resolved within 30 days unless complexity requires an extension, in which case you will be notified.

11.1 Right of Access

You have the right to request a copy of all personal data bdpk holds about you, together with information about how it is used and with whom it is shared. Access requests are free of charge and will be fulfilled within 30 days.

11.2 Right to Rectification

If any personal data bdpk holds about you is inaccurate or incomplete, you have the right to request correction. Certain data fields (such as your registered email address and mobile number) may be updated directly via your account settings without needing to contact support.

11.3 Right to Erasure

You may request that bdpk delete your personal data. This right is subject to bdpk's legal data retention obligations — where we are required by law to retain specific records, we will inform you of the retention period and delete all non-mandatory data immediately.

11.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold or where you have objected to processing — you may request that we restrict further processing of your personal data while the matter is resolved.

11.5 Right to Data Portability

Where processing is based on your consent or contractual necessity, you may request a machine-readable copy of your personal data in a commonly used format (such as CSV or JSON) so that it can be transferred to another service provider if you choose.

11.6 Right to Object

You have the right to object to processing carried out on the basis of bdpk's legitimate interests, including profiling for marketing purposes. Where you object to marketing processing, bdpk will stop processing your data for that purpose immediately.

11.7 Right to Withdraw Consent

Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without providing a reason and without any negative consequence to your account or platform access.

12 Children & Minors

The bdpk platform is strictly for adults aged 21 years or older. 21+ bdpk does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration process.

If bdpk becomes aware that personal data has been collected from a person under 21 — whether through registration, KYC review, or any other means — the account will be closed immediately, all associated personal data will be deleted (subject only to any mandatory legal retention requirements), and any deposits received will be handled in accordance with applicable underage gambling protocols.

If you believe that a minor has registered an account on bdpk, please report this immediately to [email protected] so that we can take prompt action.

13 Third-Party Links

The bdpk platform may contain references to third-party services, payment providers, and game studio brands. This Privacy Policy applies solely to data processed by bdpk within the bdpk.io platform. It does not cover the data practices of any third-party website, application, or service — including the mobile banking apps of bKash, Nagad, Rocket, or Upay — that you may access in connection with your use of bdpk.

bdpk is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you use in connection with transactions on the bdpk platform.

14 Policy Updates

bdpk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform features. Where changes are material — affecting how we use your data or your rights under this Policy — we will provide at least 14 days' advance notice via a prominent notice on the platform and/or by email to your registered address.

Your continued use of the bdpk platform after the effective date of any updated Policy constitutes your acknowledgment of the changes. The effective date at the top of this page and within the hero section will always reflect the date the current version came into force. If you disagree with any update to this Policy, you may request account closure in accordance with the Terms & Conditions.

15 Contact & Complaints

For all privacy-related enquiries, data access requests, rectification requests, erasure requests, or complaints, please contact bdpk's data support team:

Email: [email protected]
Subject line: Privacy Request – [Your Account Username]

bdpk aims to acknowledge all privacy-related communications within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response or resolution within 30 calendar days. Where a request is particularly complex or involves a high volume of data, we may extend the response period by a further 30 days and will notify you accordingly.

If you are not satisfied with bdpk's handling of your personal data or our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction or to pursue the dispute resolution process described in bdpk's Terms & Conditions.