Your Privacy Matters
at bdkt3

bdkt3 ("the Platform", "we", "us", "our") operates an internationally licensed online casino and sports betting platform accessible at bdkt3.io. The platform is designed and optimised for players in the Bangladesh market, offering cricket betting, live casino games, slots, card games, and related financial and support services.

For the purposes of this Privacy Policy, bdkt3 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers (such as payment processors or identity verification agencies) to process data on our behalf, those parties act as data processors and are bound by contractual data protection obligations consistent with this policy.

This Privacy Policy applies to all players, registered users, and visitors to the bdkt3 platform. It governs all personal data collected through the bdkt3 website, mobile-optimised browser interface, customer support channels, and any other touchpoint through which you interact with bdkt3.

bdkt3 collects personal data in the following categories. We collect only what is genuinely necessary for the purposes described in this policy.

2.1 — Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi), email address, and mobile phone number.
• Identity verification documents: National Identity Card (NID), passport, or other government-issued photo identification submitted during the Know Your Customer (KYC) verification process.
• Payment data: Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details (Dutch-Bangla Bank, BRAC Bank), and partial payment card data (Visa, Mastercard). Full card numbers are not stored by bdkt3 — payment card processing is handled by PCI-DSS compliant third-party processors.
• Support communications: The content of any messages, emails, or chat transcripts exchanged with the bdkt3 customer support team.
• Responsible gaming data: Self-exclusion requests, deposit limits, session time limits, and cooling-off period settings you apply to your account.

2.2 — Data Collected Automatically

• Device & technical data: IP address, browser type and version, operating system, device type (desktop/mobile), screen resolution, and referring URL.
• Usage data: Pages visited, games launched, bet amounts and outcomes, session duration, login timestamps, and in-platform navigation patterns.
• Cookie data: Session identifiers, preference cookies, and analytics cookies. See Section 6 for full details on our cookie practices.
• Geolocation data: Approximate geographic location derived from your IP address, used for fraud detection and jurisdictional compliance purposes. We do not collect precise GPS-level location data.

2.3 — Data From Third Parties

• Identity verification services: Confirmation of identity document authenticity from third-party KYC providers.
• Fraud prevention databases: Risk signals and flagged account information from industry fraud prevention networks.
• Payment processors: Transaction confirmation, payment status, and chargeback notifications from payment service providers.

bdkt3 uses the personal data it collects for the following specific purposes:

bdkt3 does not use your personal data for automated decision-making that produces legally significant effects without human review. Fraud flags and account restriction decisions generated by our automated systems are reviewed by a member of the compliance team before any irreversible action is taken on your account.

bdkt3 processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing that is necessary to enter into and perform the contract between you and bdkt3 — including account registration, payment processing, and the delivery of casino and betting services.
• Legal obligation: Processing that is required to comply with applicable legal obligations, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and record-keeping obligations imposed by international gaming regulators.
• Legitimate interests: Processing that is necessary for the legitimate business interests of bdkt3, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of the platform, provided those interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent as the legal basis for processing — for example, for marketing communications or the use of non-essential cookies — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

bdkt3 does not sell, rent, or trade your personal data. We share your data only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard processing partners receive the payment data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• Identity verification providers: Third-party KYC and AML screening agencies receive identity document data for the sole purpose of verifying your identity and screening against sanctions and watchlists. These providers are bound by contractual data processing agreements with bdkt3.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Hacksaw Gaming, and Ezugi may receive a pseudonymous player identifier and session token necessary to deliver their games within the bdkt3 platform. These providers do not receive your full personal details.
• Fraud prevention networks: Limited technical data (such as device fingerprints and IP addresses) may be shared with industry fraud prevention databases to identify and prevent fraudulent activity across the online gaming sector.
• Legal authorities: bdkt3 may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction in response to a lawful request, court order, or legal obligation. We will notify affected players of such disclosures where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the bdkt3 business, personal data held by bdkt3 may be transferred to the acquiring entity, subject to equivalent data protection obligations being maintained.

bdkt3 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, detect fraud, and analyse platform usage. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the bdkt3 platform. Disabling analytics cookies will not affect your ability to play games or make transactions.

bdkt3 does not use third-party advertising cookies or behavioural targeting cookies. No cross-site tracking data is shared with advertising networks.

bdkt3 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised. Retention periods are determined by the purpose for which data was collected and by applicable legal and regulatory obligations:

Where an account is closed due to suspected fraudulent activity, money laundering, or other serious breach of the Terms & Conditions, bdkt3 may retain relevant data beyond the standard retention periods for the purposes of ongoing investigation, legal proceedings, or regulatory reporting.

bdkt3 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes the following controls:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the bdkt3 servers.
• AES-256 encryption at rest for all sensitive data stored in bdkt3 databases, including identity documents and payment identifiers.
• One-way password hashing using industry-standard cryptographic algorithms. Passwords are never stored in plain text and cannot be retrieved by bdkt3 staff.
• Two-step verification (2SV) available on all player accounts. bdkt3 strongly recommends enabling 2SV to add an additional layer of protection to your account login.
• Role-based access controls (RBAC) ensuring that bdkt3 staff can access personal data only to the extent required for their specific role and responsibilities.
• Intrusion detection and prevention systems (IDS/IPS) monitoring the platform infrastructure in real time for anomalous activity and potential security threats.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Secure data centre facilities with physical access controls, redundant systems, and disaster recovery capabilities.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bdkt3 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

bdkt3 respects your rights over your personal data. The following rights are available to all players, exercisable by contacting the support team at [email protected]:

bdkt3 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive.

To submit a data rights request, please email [email protected] with the subject line "Data Rights Request — [Your Username]" and include a description of the right you wish to exercise. We may request proof of identity before processing your request to protect against unauthorised access to your data.

As part of our registration and identity verification process, bdkt3 requires all players to confirm that they are aged 21 or above and to submit valid government-issued photo identification for age verification. Any account found to belong to a person under the age of 21 will be immediately suspended, all balances will be forfeited, and any personal data associated with that account will be deleted as soon as is practicable, subject to any applicable legal retention obligations.

If you have reason to believe that a minor has registered an account with bdkt3, please contact us immediately at [email protected]. bdkt3 takes the protection of minors extremely seriously and will act swiftly on any credible report. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms.

bdkt3 operates as an offshore platform with server infrastructure and service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside of Bangladesh. These countries may have data protection laws that differ from those of your home jurisdiction.

Where personal data is transferred internationally, bdkt3 takes appropriate steps to ensure that your data receives an adequate level of protection. These steps may include:

• Entering into standard contractual clauses or equivalent data transfer agreements with receiving entities.
• Transferring data only to jurisdictions that maintain internationally recognised data protection standards.
• Applying technical safeguards (such as encryption) to data in transit across international borders.
• Conducting due diligence on third-party processors to verify that appropriate security measures are in place at the destination.

By registering an account with bdkt3 and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your personal data as described in this section.

bdkt3 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the platform. The "Last Updated" date displayed at the top of this page will be revised whenever a material change is made.

Where a change is material — meaning it meaningfully alters the way in which we collect, use, share, or retain your personal data — bdkt3 will notify registered players via email to their registered address and will display a prominent notice upon login for a period of not less than 14 days following the change taking effect.

Your continued use of the bdkt3 platform following notification of a material change to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the updated policy, you should cease using the platform and contact our support team to request account closure.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which bdkt3 handles your personal data, please contact our dedicated privacy support team. We treat all privacy enquiries with the highest priority and aim to respond within 24 hours Bangladesh Standard Time (BST, UTC+6).

You may reach us via the following channel:

• Email: [email protected] — please use the subject line "Privacy Enquiry — [Your Username]" to ensure your message is routed to the correct team.

When submitting a privacy enquiry, please include your registered username, a clear description of your query or concern, and any relevant reference numbers. Providing this information upfront will help us resolve your enquiry as quickly and efficiently as possible.

bdkt3 is committed to resolving all privacy concerns through direct communication. If, after contacting us, you feel your concern has not been adequately addressed, you may seek guidance from an independent data protection authority or legal adviser in your jurisdiction.