Privacy Policy — bdk3 Data Commitment

1. Introduction & Scope

bdk3 ("we", "us", "our") operates the online casino and sports betting platform accessible at bdk3.vip. As the data controller for the personal information you provide to us, bdk3 is committed to protecting your privacy and handling your data in a lawful, fair, and transparent manner consistent with internationally recognised data protection principles.

This Privacy Policy covers all personal data collected through your interaction with the bdk3 platform — including account registration, identity verification (KYC), deposit and withdrawal transactions, gameplay activity, customer support communications, and use of our promotional programmes such as the Earn Money referral scheme. It also covers data collected automatically through cookies, device identifiers, and analytics tools when you browse the bdk3 website.

This policy applies to players located in Bangladesh and is written in English as the operational language of the bdk3 platform. Where we collect data from persons located in other jurisdictions, additional or different obligations may apply, and bdk3 will endeavour to comply with such obligations to the extent they are relevant and practicable.

bdk3 does not knowingly collect personal data from persons under the age of 18. The bdk3 platform is strictly for adults aged 18 and above. If we become aware that personal data has been submitted by a person under 18, we will delete that data promptly and close the associated account without further notice.

2. Data We Collect

bdk3 collects personal data in two principal ways: information you provide to us directly, and information collected automatically as you use the platform. The categories of data we collect are set out below.

2.1 Data You Provide Directly

• Registration data: Your mobile number, chosen username, date of birth, and account password (stored in hashed form — bdk3 never stores plaintext passwords).
• Identity verification (KYC) data: Full legal name, date of birth, National Identity Card (NID) number or passport number, and a photograph of the relevant document. This data is collected solely for the purpose of verifying your identity and age.
• Financial data: Mobile wallet numbers (bKash, Nagad, Rocket), bank account details where applicable for bank transfer transactions, and records of deposit and withdrawal transactions. bdk3 does not store full payment card numbers or mobile banking PINs.
• Communication data: Messages, emails, and support chat transc ripts submitted to bdk3's customer support team via live chat or email to [email protected]. These records are retained for quality assurance, dispute resolution, and fraud prevention purposes.
• Referral data: If you participate in the bdk3 Earn Money referral programme, we collect details of referrals you generate, including the mobile numbers of referred individuals once they register and verify their accounts.
• Responsible gaming data: Deposit limits, session time settings, loss limits, and self-exclusion requests made through your account settings dashboard. This data is treated with heightened sensitivity and is never shared with third-party marketing partners.

2.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network carrier. This information is used to optimise platform performance and detect suspicious login attempts.
• Usage and gameplay data: Pages visited, time spent on each page, bet history, game rounds played, wager amounts, win/loss records, and session duration. This data is used to improve the platform experience and to conduct fraud monitoring.
• Geolocation data: Approximate geographic location derived from your IP address. bdk3 does not request access to GPS-precise device location. IP-derived location is used to apply platform access rules and to tailor content to the Bangladesh market.
• Cookie and tracking data: Information collected via cookies, pixel tags, and local storage as described in Section 5 of this Privacy Policy.

2.3 Data Collected About Third Parties (Referrals)

If you refer a friend or contact to bdk3 via the Earn Money programme and share their mobile number with us, you confirm that you have obtained that person's consent to share their contact information with bdk3 for the purpose of the referral programme. bdk3 will only use such information to contact the referred individual regarding their potential bdk3 account and will not add them to general marketing communications without their own direct consent.

3. How We Use Your Data

bdk3 processes your personal data only for legitimate, specified purposes. The following table summarises our primary processing activities alongside the legal basis and purpose for each.

3.1 Marketing Communications

bdk3 will only send you promotional communications — such as bonus offers, seasonal promotions (Eid, Pohela Boishakh, IPL season promotions), and BPL cricket betting alerts — where you have opted in to receive such messages at registration or subsequently via your account notification settings. You may withdraw your consent to marketing communications at any time by updating your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect any other aspect of your account or your ability to use the bdk3 platform.

3.2 Automated Decision-Making

bdk3 uses automated systems to perform certain account management functions, including fraud risk scoring, bonus eligibility assessment, and bet limit adjustments. These automated processes are designed to protect the integrity of the platform and the interests of genuine players. Where an automated decision materially affects your account — such as a temporary suspension triggered by a fraud flag — you have the right to request human review of that decision by contacting [email protected].

4. Data Sharing & Disclosure

bdk3 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose.

4.1 Service Providers

bdk3 works with carefully selected third-party service providers who assist in operating the platform. These providers act as data processors on bdk3's behalf and are contractually bound to use your data only for the purposes instructed by bdk3, and to maintain appropriate security standards. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, and bank transfer partners — solely to process your financial transactions.
• KYC and identity verification providers: Third-party identity document verification services used to confirm the authenticity of documents submitted during the KYC process.
• Game content providers: Pragmatic Play, Evolution Gaming, Ezugi, Spribe, Microgaming, and NetEnt supply game content via APIs integrated into the bdk3 platform. These providers may receive limited session and transaction data required to operate their game engines and RNG systems.
• Cloud infrastructure and hosting: bdk3's platform is hosted on secure cloud infrastructure. Hosting providers have access to server-level data but are contractually prohibited from accessing application-level player data.
• Analytics providers: Aggregated, anonymised usage data may be processed by analytics tools to help bdk3 understand platform usage patterns. No personally identifiable information is shared with analytics providers in a form that allows individual identification.

4.2 Legal and Regulatory Disclosure

bdk3 may disclose personal data to law enforcement authorities, regulatory bodies, or other official agencies where required to do so by applicable law, court order, or in response to a lawful request from a competent authority. Where permitted, bdk3 will endeavour to notify you of such a disclosure request before responding to it. bdk3 will not voluntarily disclose player data to government bodies absent a lawful basis for doing so.

4.3 Business Transfers

In the event that bdk3 undergoes a merger, acquisition, restructuring, or sale of all or part of its business, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bdk3 will endeavour to notify affected players in advance and will ensure that the acquiring entity commits to data handling standards no less protective than those described in this Privacy Policy.

5. Cookies & Tracking Technologies

The bdk3 website uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to help us understand how users interact with our site. A "cookie" is a small text file stored in your browser or on your device when you visit a website.

5.1 Types of Cookies Used by bdk3

5.2 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies from specific websites. Please note that disabling strictly necessary or security cookies may prevent you from logging into your bdk3 account or accessing certain platform features. Detailed cookie management instructions for popular browsers are available from the respective browser's help documentation.

bdk3 does not use third-party advertising cookies or behavioural targeting cookies that track your activity across other websites. Our tracking technologies are limited to improving your experience on the bdk3 platform itself.

6. Data Security & Retention

6.1 Security Measures

bdk3 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption: All data transmitted between your device and the bdk3 platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. The bdk3.vip domain is SSL-certified.
• Password hashing: Account passwords are stored using a one-way cryptographic hash function. bdk3 never stores plaintext passwords and can never retrieve your original password — only reset it.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. bdk3 staff members with access to personal data are subject to confidentiality obligations and receive data protection training.
• Two-factor authentication (2FA): bdk3 supports 2FA on player accounts and encourages all players to enable it from their account security settings to provide an additional layer of protection against unauthorised access.
• Regular security audits: bdk3's platform infrastructure undergoes periodic security assessments to identify and address vulnerabilities.

While bdk3 takes reasonable and appropriate steps to protect your data, no online platform can guarantee absolute security against all possible threats. If you become aware of any actual or suspected security breach affecting your bdk3 account, contact [email protected] immediately.

6.2 Data Retention Periods

bdk3 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following general retention schedule applies:

• Account and registration data: Retained for the duration of your account's active life, plus a minimum of five years following account closure — to satisfy anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years from the date of verification, or from the date of account closure, whichever is later.
• Transaction records (deposits and withdrawals): Retained for a minimum of five years from the transaction date.
• Customer support communications: Retained for three years from the date of the communication, or until any related dispute is fully resolved, whichever is later.
• Gameplay and bet history: Retained for two years from the date of the activity, after which it is anonymised and aggregated for statistical purposes.
• Marketing consent records: Retained for the duration of your account and for two years following account closure or withdrawal of consent, as evidence of the consent decision.

When retention periods expire, bdk3 securely deletes or anonymises the relevant data. Anonymised data — which cannot be used to identify you individually — may be retained indefinitely for analytical and statistical purposes.

7. Your Privacy Rights

As a bdk3 player, you have meaningful rights over your personal data. bdk3 is committed to facilitating the exercise of these rights in a timely and straightforward manner. To exercise any of the rights described below, contact [email protected] with the subject line "Privacy Rights Request" and include your registered mobile number for identity verification purposes.

7.1 Right to Access

You have the right to request a copy of the personal data bdk3 holds about you. Upon receipt of a verified access request, bdk3 will provide a summary of the data we hold within 30 days. The summary will cover account data, KYC data, transaction history, and communication records as applicable.

7.2 Right to Correction

If any personal data bdk3 holds about you is inaccurate or out of date, you have the right to request its correction. Requests to correct account information can also be made directly through your account settings dashboard for basic details, or via [email protected] for KYC data.

7.3 Right to Deletion

You may request deletion of your personal data ("right to be forgotten") subject to certain limitations. bdk3 cannot delete data that it is legally required to retain — for example, transaction records required for anti-money laundering compliance, or KYC data required under applicable verification obligations. Where deletion is possible, bdk3 will confirm the scope of deletion within 30 days of receiving a verified request.

7.4 Right to Withdraw Marketing Consent

Where bdk3 processes your data for marketing communications on the basis of your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out before withdrawal. To withdraw marketing consent, update your notification settings in your bdk3 account dashboard or email [email protected].

7.5 Right to Object to Automated Processing

Where bdk3 makes decisions about your account through automated means (as described in Section 3.2), you have the right to request human review of any such decision that materially affects you. Submit your objection to [email protected] with a clear description of the automated decision you wish to contest. bdk3 will review and respond within five business days.

8. Contact & Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or bdk3's data practices, please contact the bdk3 support team. All data-related queries are handled with priority by team members trained in data protection obligations.

Email: [email protected] — use the subject line "Privacy Policy Query" for fastest routing.

Live Chat: Available 24/7 from your bdk3 account dashboard. Identify your query as privacy-related at the start of the chat session.

Response hours: Email queries are responded to within 30 minutes during Bangladesh Standard Time (BST, UTC+6) business hours. Queries received outside business hours are addressed on the next business day. Privacy rights requests (access, deletion, correction) are processed within 30 days regardless of when they are submitted.

bdk3 may update this Privacy Policy from time to time to reflect changes to our data practices, platform features, or applicable legal requirements. When material updates are made, bdk3 will post a notice on the platform and update the "Last updated" date at the top of this document. Your continued use of the bdk3 platform after any such update constitutes acceptance of the revised Privacy Policy.