01 Information We Collect
bdt19 collects personal data through several channels: directly from you when you register and use the platform, automatically through technical systems as you interact with our services, and in limited circumstances from verified third-party sources used for identity and fraud checks. We do not collect data beyond what is necessary for the purposes described in this Policy.
Registration Data
When you create a bdt19 account, we collect the information you provide during the registration form, including your full legal name, date of birth, residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), a valid email address, and a mobile phone number. This information is required to create your account and is validated as part of our Know Your Customer (KYC) process.
Identity Verification Data
To comply with our anti-money laundering obligations and to verify that all players are aged 18 or above, we collect identity documents including copies of your National Identity Card (NID), passport, or driving licence, as well as proof-of-address documents such as recent utility bills, bank statements, or mobile financial service statements. These documents are used solely for identity verification purposes and are stored securely with access restricted to authorised compliance staff.
Financial Data
When you make a deposit or withdrawal, we collect transaction data including the payment method used (such as bKash, Nagad, Rocket, Upay, or bank details), transaction amounts, timestamps, and reference numbers. We do not store full bKash or Nagad PIN numbers. All payment data is processed through encrypted channels and handled in accordance with the security requirements of our payment partners.
Usage and Behavioural Data
We automatically collect data about how you interact with bdt19, including the games you play, bet amounts, session durations, pages visited, features accessed, and in-platform navigation patterns. This data is used to personalise your experience, improve platform performance, and — critically — to monitor for signs of problem gambling as part of our Responsible Gaming programme.
Technical Data
Our servers automatically log your IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), screen resolution, referring URL, and time zone. This technical data is used for platform security, fraud prevention, and performance optimisation. We do not use technical data to identify you personally unless there is a specific security or compliance reason to do so.
| Data Category | Examples | Collection Method |
|---|---|---|
| Registration Data | Name, date of birth, address, email, phone | Provided by you at sign-up |
| Identity Documents | NID card, passport, proof of address | Uploaded by you during KYC |
| Financial Data | bKash/Nagad numbers, transaction history | Generated during deposits/withdrawals |
| Behavioural Data | Games played, bets placed, session times | Automatically recorded by platform |
| Technical Data | IP address, browser, device, OS | Automatically logged by servers |
| Communications Data | Support chat logs, email correspondence | Generated when you contact support |
02 How We Use Your Data
bdt19 processes your personal data on the basis of contractual necessity (to deliver our services to you), legitimate interests (to operate our platform safely and fairly), legal obligation (to comply with applicable laws and anti-money laundering requirements), and — where required — your explicit consent. We use your personal data for the following specific purposes:
- Account creation and management: To register your account, verify your identity, and maintain your player profile throughout your use of bdt19.
- Service delivery: To process your bets, manage your balance, credit bonuses, and facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfers.
- Age and identity verification: To confirm that all players are aged 18 or above and that the identity information provided matches the payment methods used, in line with our responsible gaming and anti-fraud policies.
- Customer support: To respond to your support queries, resolve disputes, process complaints, and communicate important account notices to you.
- Responsible Gaming monitoring: To detect patterns of play that may indicate problem gambling behaviour, and to enable support tools such as deposit limits, session reminders, and self-exclusion at the player's request.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, and any other conduct that violates our Terms & Conditions or applicable law.
- Platform improvement: To analyse aggregated usage data — stripped of personally identifying information — to improve game selection, user interface design, and platform performance.
- Marketing communications: Where you have opted in, to send you promotional offers, bonus notifications, and event announcements by email or SMS. You may withdraw marketing consent at any time by contacting support or adjusting your account communication preferences.
03 Data Sharing & Third Parties
bdt19 does not sell, rent, or trade your personal data to third parties for their own commercial use. However, to operate our platform effectively and fulfil our legal obligations, we share data with a limited number of carefully selected third-party service providers and regulatory counterparts. All third parties with whom we share data are contractually required to process it only for the specified purpose and to maintain appropriate security standards.
Payment Processing Partners
To process your deposits and withdrawals, we share necessary transaction data with our payment processing partners including bKash, Nagad, Rocket, Upay, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and Dutch-Bangla Bank. Data shared is limited to what is strictly required to complete and verify each transaction. We do not share your full account profile or betting history with payment partners.
Identity Verification Services
bdt19 uses accredited third-party identity verification providers to assist with KYC checks. These providers receive the identity documents and personal details you submit during verification and return a verification result to bdt19. They are not permitted to retain or reuse your documents for any purpose beyond the specific verification request.
Game Providers
Games on the bdt19 platform are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game from one of these providers, your session data (such as game ID, bet amounts, and outcome) is shared with the relevant provider for the purpose of game operation, dispute resolution, and RNG audit compliance. Game providers do not receive your full registration or financial profile.
Legal and Regulatory Disclosures
bdt19 may disclose personal data to law enforcement agencies, regulatory authorities, or courts if required to do so by applicable law, court order, or to protect the rights, property, and safety of bdt19, its players, or the public. We will notify you of any such disclosure unless prohibited from doing so by the relevant legal process.
04 Cookies & Tracking Technologies
bdt19 uses cookies and similar tracking technologies to operate our platform efficiently, remember your preferences, maintain your login session, and analyse how players use our services. A cookie is a small text file placed on your device by our website. Cookies do not contain executable code and cannot be used to access other data on your device.
Types of Cookies We Use
- Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language preferences, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without preventing the platform from working correctly.
- Performance and Analytics Cookies: These cookies collect aggregated, anonymised data about how players use bdt19 — which pages are most visited, which games are most popular, and where players encounter technical difficulties. This data helps us improve the platform. No personally identifying information is included in these analytics reports.
- Functional Cookies: These cookies remember your platform preferences such as your preferred deposit method, display settings, and responsible gaming tools you have activated. They are not strictly necessary but improve the quality of your experience.
- Marketing Cookies: If you have opted in to marketing communications, these cookies help us show you relevant promotions on the bdt19 platform and avoid showing you offers you have already claimed. We do not use third-party advertising networks that place cookies on external sites.
Managing Cookies
You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your bdt19 account. If you have any questions about the cookies bdt19 uses, please contact support at [email protected].
05 Data Security Measures
bdt19 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework is reviewed and updated regularly to reflect evolving threats and best practices in information security.
- Encryption in Transit: All data transmitted between your device and bdt19 servers is encrypted using TLS 1.3, the current industry standard for secure web communications. The padlock icon in your browser address bar confirms that your connection is encrypted.
- Encryption at Rest: Personal data stored in our databases is encrypted at rest using AES-256 encryption. This means that even if our storage media were physically compromised, your data would remain unreadable without the encryption keys.
- Access Controls: Access to personal data within bdt19 is strictly role-based. Only authorised personnel whose job function requires access to specific categories of data are granted that access. All internal access events are logged and auditable.
- Penetration Testing: bdt19 conducts regular security assessments including penetration testing and vulnerability scanning conducted by independent security specialists. Critical findings are remediated on a priority basis.
- Two-Factor Authentication: We offer SMS-based two-factor authentication (2FA) for all player accounts and mandate it for all internal staff accounts that have access to player data systems.
- Incident Response: In the event of a data security incident that poses a risk to your rights and freedoms, bdt19 will notify affected players promptly and implement containment measures without delay.
06 Data Retention Policy
bdt19 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years post-closure | AML compliance and dispute resolution |
| Identity Documents (KYC) | 5 years from the date of verification | Regulatory and AML requirements |
| Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| Betting History | 3 years from each bet date | Dispute resolution and audit trail |
| Support Correspondence | 3 years from last interaction | Customer service quality and legal reference |
| Marketing Preferences | Until withdrawn or account closure | Consent management |
| Technical / Server Logs | 90 days | Security monitoring and fraud detection |
At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.
07 Your Privacy Rights
As a bdt19 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team in writing at [email protected]. We will acknowledge your request within 5 business days and provide a full response within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
- Right of Access: You have the right to request a copy of the personal data bdt19 holds about you. This is commonly known as a Subject Access Request (SAR). We will provide this data in a clear, structured format.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update basic account information directly from your account settings page.
- Right to Erasure: You may request that we delete your personal data. We will honour this request where there is no overriding legal obligation that requires us to retain the data. Note that AML and financial record-keeping requirements mean that some data must be retained for the periods described in the Data Retention section above, even after account closure.
- Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your personal data — for example, while a dispute about the accuracy of data is being resolved.
- Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive the personal data you provided to us in a structured, machine-readable format.
- Right to Withdraw Consent: Where bdt19 processes your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
- Right to Object: You have the right to object to the processing of your personal data where bdt19 relies on legitimate interests as the legal basis for that processing. We will assess the objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
08 Contact & Policy Updates
If you have any questions, concerns, or complaints about how bdt19 handles your personal data, or if you wish to exercise any of the privacy rights described in this Policy, please contact our support team in writing:
Email: [email protected]
Platform: bdt19.net
Support Hours: Monday to Sunday, 09:00 – 22:00 Bangladesh Standard Time (BST, UTC+6)
We take all privacy-related correspondence seriously and aim to provide a substantive response within 14 business days. Where a complaint cannot be resolved to your satisfaction through our internal process, you may refer the matter to the relevant authority in your jurisdiction.
Updates to This Privacy Policy
bdt19 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes to this Policy, we will publish the revised version on this page with an updated effective date and, where appropriate, notify active players by email. The version of the Policy in force at the time of your most recent use of the platform is the version that governs our data processing relationship with you. We encourage you to review this page periodically to stay informed of any updates.