1bdt Privacy Policy

This Privacy Policy ("Policy") is published by 1bdt ("1bdt", "we", "us", "our") and applies to all users ("Player", "you", "your") who access or use the 1bdt website, mobile interface, casino games, sports betting markets, live dealer products, payment services, promotional materials, and any other features offered through the 1bdt platform (collectively, the "Platform"), accessible at 1bdt.io.

1bdt is committed to protecting the privacy and personal data of all players across Bangladesh. This Policy is designed to be fully transparent about our data practices, consistent with applicable data protection standards. It covers what personal information we collect, the purposes for which it is collected and processed, our legal basis for doing so, how long we retain it, who we share it with, and the rights you have in relation to your own data.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, all of which form part of the agreement between you and 1bdt. Where any conflict exists between this Policy and those documents on a data-related matter, this Policy takes precedence.

1bdt collects personal data in the following categories. Collection occurs only where it is necessary for the stated purposes described in Section 4 of this Policy.

1bdt does not collect or store sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where biometric identity verification is required by applicable law or is explicitly consented to by you as part of an enhanced identity check.

1bdt collects personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, participating in promotions, or contacting customer support.
• Automated Collection: Technical and usage data gathered automatically when you access or interact with the Platform, including through cookies, web beacons, pixel tags, and server logs. See Section 7 for full details on cookies and tracking technologies.
• Third-Party Sources: Data received from payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank), identity verification service providers, fraud prevention agencies, and credit reference agencies for the purposes of verifying your identity and preventing financial crime.
• Device Fingerprinting: Technical information about the combination of hardware and software characteristics of your device, used for fraud detection and prevention purposes only. This data is hashed and anonymised where possible.
• Publicly Available Sources: In limited circumstances, 1bdt may verify information provided by you against publicly available records, including national civil registration databases, where permitted by applicable law.

1bdt uses the personal data it collects for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with those stated below without first obtaining your explicit consent or establishing a fresh legal basis.

• Account Administration: Creating, managing, and maintaining your player account; processing your registration and login; communicating account-related notifications; resetting credentials.
• Identity & Age Verification: Confirming that you are who you say you are and that you are at least 21 years of age before permitting access to wagering functions.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer; reconciling transaction records; issuing winnings and bonus credits to your account balance.
• Platform Delivery: Providing access to casino games, sports betting markets, live dealer tables, crash games, and all other Platform features you choose to use.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent account activity, multi-accounting, money laundering, collusion, bonus abuse, and other prohibited conduct.
• Regulatory Compliance: Meeting obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements; responding to lawful requests from competent authorities.
• Responsible Gaming: Monitoring for indicators of problematic gambling behaviour; enforcing deposit limits, cooling-off periods, and self-exclusion requests; contacting players under the responsible gaming programme.
• Customer Support: Responding to your queries, complaints, and feedback; maintaining records of support interactions for quality assurance.
• Marketing & Promotions: Sending you information about bonuses, promotions, game launches, and seasonal offers — only where you have opted in to receive such communications. You may opt out at any time.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game performance, detect technical faults, and enhance the overall player experience.

1bdt processes your personal data under one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing that is required to perform the contract between you and 1bdt — specifically, operating your player account, processing your transactions, and delivering the Platform's services. Without this processing, we cannot provide the services you have registered for.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and tax reporting duties. This processing is non-negotiable and cannot be opted out of.
• Legitimate Interests: Processing carried out in pursuit of 1bdt's legitimate business interests where those interests are not overridden by your rights and freedoms. This covers fraud detection, security monitoring, platform analytics, and internal reporting. 1bdt conducts legitimate interest assessments before relying on this basis.
• Consent: Processing for purposes beyond what is required under the above bases — in particular, direct marketing communications — is carried out only where you have given clear, informed, and freely withdrawable consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

1bdt does not sell your personal data. We share it only in the following circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners receive financial data necessary to process your transactions. Each provider operates under its own privacy policy and data protection obligations.
• Identity Verification Partners: Third-party KYC and age-verification services receive identity data strictly to confirm your eligibility to use the Platform. These partners are contractually prohibited from using your data for any other purpose.
• Fraud Prevention Agencies: In cases of suspected fraudulent activity or financial crime, relevant account and transaction data may be shared with fraud intelligence services and financial crime prevention networks.
• Game Content Providers: Studio providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt may receive anonymised session and technical data necessary to deliver and maintain their game content on the Platform. These providers do not receive your personally identifiable information.
• Regulatory & Law Enforcement Authorities: Where required by a valid legal order, court warrant, or regulatory directive, 1bdt will disclose personal data to competent authorities. We will notify you of such a disclosure where we are legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, asset sale, or restructuring of 1bdt's business, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer that materially changes the way your data is handled.

1bdt uses cookies and similar tracking technologies on its Platform to ensure it functions correctly and to improve the player experience. The following categories of cookies are in use:

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the availability or functionality of specific Platform features. 1bdt does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving targeted advertisements.

1bdt retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status, plus a minimum of 5 years following account closure.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in compliance with anti-money laundering record-keeping obligations.
• Identity Verification Documents: Retained for a minimum of 5 years from the date of account closure or the last identity check, whichever is later.
• Customer Support Records: Live chat transcripts and email correspondence retained for 2 years from the date of the interaction, unless the record relates to a formal complaint or legal matter, in which case it is retained for 5 years.
• Marketing Preferences & Consent Records: Retained for the duration of your account plus 2 years, to demonstrate compliance with consent obligations.
• Anonymised Analytics Data: Retained indefinitely in anonymised, aggregated form, as it no longer constitutes personal data once de-identified.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible (for example, due to backup systems), the data is isolated from active processing until it can be securely destroyed.

1bdt employs a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Transport Security: All data in transit is encrypted using TLS 1.3 with 256-bit AES encryption. Strict HTTP Secure (HSTS) is enforced site-wide to prevent downgrade attacks.
• At-Rest Encryption: Personal data stored on 1bdt's servers is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect and are rotated on a regular schedule.
• Access Controls: Access to personal data is restricted to 1bdt personnel on a strict need-to-know basis. Role-based access controls (RBAC) are enforced, and all access to sensitive data is logged and audited.
• Infrastructure Security: 1bdt's platform infrastructure is hosted in data centres with physical security controls, redundant power systems, and network intrusion detection systems. Regular penetration testing is conducted by independent security professionals.
• Payment Security: Full payment card and mobile wallet credentials are never stored on 1bdt's own servers. Payment data is handled exclusively by PCI-DSS Level 1 certified processors.
• Incident Response: 1bdt maintains a documented data breach response plan. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 1bdt will notify affected players within 72 hours of becoming aware of the incident, where technically and legally feasible.

As a player whose personal data is processed by 1bdt, you have the following rights in respect of that data. To exercise any of these rights, contact our support team via the channels listed in Section 14.

• Right of Access: You have the right to request a copy of the personal data 1bdt holds about you, together with an explanation of how and why it is being processed. We will respond to access requests within 10 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain details directly from your account settings; for other corrections, contact support.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to its processing. Note that this right is subject to our legal obligations to retain certain data under AML and KYC regulations — we cannot delete data we are legally required to retain.
• Right to Restriction: You may request that we restrict the processing of your data in specific circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and we are considering whether our legitimate interests override your objection.
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will stop processing your data for that purpose immediately and without requiring justification.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.

1bdt will respond to all valid rights requests within 10 business days. We may ask you to verify your identity before processing a request to ensure we are responding to the correct person.

The 1bdt Platform is strictly intended for adults aged 21 and above. 1bdt does not knowingly collect personal data from any individual under the age of 21. Our registration process includes age verification checks specifically designed to prevent access by minors.

If 1bdt becomes aware that personal data has been collected from a person under the age of 21 — whether through a failure of verification controls or through a minor misrepresenting their age — the following actions will be taken without delay:

• The relevant account will be permanently closed.
• All deposits will be returned to the original payment source.
• All winnings and bonus balances will be voided and forfeited.
• All personal data associated with the account will be deleted, except where retention is required for fraud investigation or legal compliance purposes.

The 1bdt Platform may contain references to or integrations with third-party services, including payment processors and game studio providers. While 1bdt carefully vets its service partners, we are not responsible for the privacy practices of external organisations.

Each third-party service provider you interact with — including bKash, Nagad, Rocket, Upay, and game studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi — operates under its own privacy policy. We strongly encourage you to review the privacy policies of any third-party services you use in connection with your 1bdt account.

1bdt is not liable for any data collected, stored, or processed by third-party providers through their own platforms, interfaces, or applications. Any concerns about how a third-party provider handles your data should be directed to that provider directly.

1bdt reserves the right to update, revise, or replace this Privacy Policy at any time. Changes may be made to reflect updates to our data practices, new legal or regulatory obligations, structural changes to the Platform, or feedback from players and advisors.

When material changes are made to this Policy, 1bdt will notify active players by email at the registered address on file, and will post a prominent notice on the Platform for a period of at least 14 days prior to the changes taking effect. The updated Policy will always be available at 1bdt.io/privacy-policy, and the version number and effective date at the top of the document will reflect the latest revision.

Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with material changes to this Policy, you should discontinue use of the Platform and contact support to close your account before the changes take effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 1bdt holds about you, please reach out to our support team using the contact details below. All contact details are provided as plain text only and are not clickable links.

• Live Chat: Available 24/7 directly inside your 1bdt account dashboard. Average response time under 2 minutes. This is the fastest channel for urgent data-related matters.
• Email: [email protected] — Please use the subject line "Privacy Request — [Your Username]" for all data rights requests. Response time 2–6 hours.
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays such as Eid, Victory Day (16 December), and Independence Day (26 March).

When contacting us about a data rights request, please include your registered account username, the specific right you wish to exercise, and a brief description of your request. We may ask you to verify your identity before processing your request to ensure your data is protected from unauthorised access.