brtbdt Privacy Policy — How We Protect Your Personal Data

1. Data We Collect

brtbdt collects personal data from players through several channels: directly from you when you register an account, during the KYC verification process, and automatically when you use the platform. We collect only the data that is necessary for the purposes described in this Privacy Policy, and we do not collect sensitive data beyond what is required for identity verification and anti-money laundering compliance.

Data you provide directly:

• Registration data: full legal name, date of birth, email address, residential address, mobile number, and chosen username
• KYC verification documents: government-issued photo ID (National Identity Card, passport, or driving licence), proof of address, and proof of payment method ownership
• Financial data: deposit and withdrawal transaction records, payment method details (bKash account number, Nagad account number, bank account details), and transaction history
• Communications data: the content of any messages you send to our support team via live chat or email, including support ticket history
• Responsible gaming data: any deposit limits, cooling-off periods, or self-exclusion requests you submit through your account settings

Data collected automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers
• Usage data: pages visited, games played, bet amounts, session duration, clickstream data, and feature interaction logs
• Location data: approximate geographic location derived from your IP address (city and country level only — we do not collect precise GPS coordinates)
• Cookie and tracking data: session identifiers, preference settings, and analytics data as described in the Cookies section of this policy

2. How We Use Your Data

brtbdt processes your personal data only for legitimate, clearly defined purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The following table outlines the primary purposes for which we use your data and the legal basis on which that processing rests.

Marketing communications: brtbdt will only send you promotional emails, SMS messages, or in-platform notifications about bonuses and special offers if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your marketing consent at any time by updating your notification preferences or contacting our support team. Withdrawing marketing consent does not affect the lawfulness of any processing carried out prior to that withdrawal.

3. Cookies & Tracking Technologies

brtbdt uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics data that helps us improve the user experience. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

The following categories of cookies are used on the brtbdt platform:

brtbdt does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. We do not share cookie data with advertising networks.

4. Data Sharing & Third Parties

brtbdt does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment processors: When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or a Bangladeshi bank, we share the minimum necessary financial data with that payment provider to process the transaction. Each payment provider operates under its own privacy policy and data protection obligations.

Game providers: Games on the brtbdt platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data (e.g., game round IDs, bet amounts) for game integrity and RNG audit purposes. No personally identifiable information is shared with game studios beyond what is required for dispute resolution.

KYC and identity verification partners: brtbdt may use a third-party identity verification service to assist with document authentication during the KYC process. Any such partner is bound by a data processing agreement that restricts their use of your data to the KYC purpose only.

Legal and regulatory authorities: brtbdt is required by applicable law to report certain financial transactions and suspicious activity to relevant authorities. In the event of such a legal obligation, we will disclose the minimum data required to satisfy the obligation. Where permitted by law, we will notify you of such a disclosure.

Business transfers: In the event of a merger, acquisition, or sale of all or part of brtbdt's business, player data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy.

Data categories shared with third parties:

5. Data Retention & Storage

brtbdt retains your personal data for as long as your account is active and for such additional periods as are required to meet our legal, regulatory, and operational obligations. The specific retention periods applicable to the main categories of data we hold are set out below.

All personal data is stored on secure servers protected by industry-standard physical and technical security controls. Where data is processed or stored outside of Bangladesh, brtbdt ensures that appropriate contractual protections are in place to maintain an equivalent standard of data security.

Once the applicable retention period has expired, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any individual.

6. Data Security Measures

brtbdt implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes the following measures:

• Transport-layer encryption: All data in transit between your device and brtbdt's servers is encrypted using TLS 1.2 or higher. Our platform enforces HTTPS across every page and API endpoint.
• At-rest encryption: Sensitive data fields — including identity documents, financial account numbers, and KYC records — are encrypted at rest using AES-256 encryption.
• Access controls: Access to systems containing personal data is restricted to authorised brtbdt personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Password security: Player account passwords are stored using a one-way cryptographic hash. brtbdt employees cannot view your password and will never ask you to share it.
• Two-factor authentication: We strongly encourage all players to enable two-factor authentication (2FA) on their brtbdt account for additional login security.
• Penetration testing: brtbdt conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in our platform infrastructure.
• Incident response: In the event of a data security incident that poses a risk to your rights and freedoms, brtbdt will notify affected players and relevant authorities within the timeframe required by applicable law.

7. Your Privacy Rights

As a brtbdt player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond to all valid requests within 30 days of receipt. In cases of complexity or high volume of requests, this period may be extended by a further 30 days, of which we will notify you.

• Right of access: You have the right to request a copy of all personal data brtbdt holds about you, together with information about how that data is processed. We will provide this information in a clear, portable format at no charge.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many of your details directly through your account settings; for changes to identity data, please contact our support team.
• Right to erasure ("right to be forgotten"): You may request that brtbdt delete your personal data. We will honour such requests where there is no overriding legal obligation that requires us to retain the data. Note that financial transaction records and KYC documents are subject to mandatory minimum retention periods under applicable law and cannot be deleted on request within those periods.
• Right to restriction of processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that we temporarily restrict how your data is processed.
• Right to data portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You have the right to object to processing of your personal data where that processing is based on brtbdt's legitimate interests. Upon receiving a valid objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

8. Contact & Data Enquiries

brtbdt is committed to handling all privacy and data protection enquiries promptly and transparently. If you have any questions about this Privacy Policy, about the way we process your personal data, or if you wish to exercise any of the rights described in Section 7, please contact us using the details below.

Data enquiries and privacy rights requests:
Email: [email protected]
Subject line: "Privacy Rights Request" or "Data Enquiry"
Response time: Within 30 days of receipt

General support:
Email: [email protected]
Live chat: Available 24/7 via the brtbdt platform
Language: English

brtbdt reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable law. When we make material changes to this policy, we will notify registered players by email and publish the updated version on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.

By continuing to use the brtbdt platform after a revised Privacy Policy has been published, you acknowledge the updated terms. If you do not agree with any changes to this policy, you should cease using the platform and contact our support team to close your account in accordance with our Terms & Conditions.