Privacy Policy

1Introduction

bd3k ("we", "us", "the Platform") is committed to protecting the personal data of all individuals who use bd3k.app. This Privacy Policy sets out in plain language what personal data we collect from you, why we collect it, how it is used, who it may be shared with, and what rights you have in relation to your data. This policy applies to all bd3k account holders and to any visitor who browses bd3k.app, regardless of whether they have registered an account.

By registering a bd3k account or continuing to use bd3k.app, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you should not use bd3k.app.

2What Data We Collect

bd3k collects personal data in three main ways: data you provide directly when registering or using your account, data generated automatically by your use of the Platform, and data we receive from third-party payment processors. The following subsections detail each category.

Data You Provide Directly

When you register an account or interact with bd3k support, you provide the following categories of personal data:

• Full name and date of birth, used for identity verification and age eligibility checks.
• Bangladeshi mobile phone number, which serves as your primary account identifier and communication channel.
• Account login credentials (username and hashed password). bd3k never stores passwords in plain text.
• Identity verification documents (such as a National ID card or passport) where requested as part of KYC procedures.

Data Generated by Your Platform Use

When you use bd3k, the Platform automatically collects certain technical and behavioural data. This data is used to maintain platform security, improve service quality, and detect prohibited activity:

• Device information: device type, operating system version, browser type and version, screen resolution, and unique device identifiers where applicable.
• Network information: IP address, mobile network operator, and approximate geographic location derived from IP address (not GPS).
• Session data: pages visited, time spent on each page, game sessions initiated (game title, stake, and outcome), and navigation paths within the Platform.
• Communication records: messages and enquiries submitted to bd3k support, including the content of those communications and the date and time of submission.

Data Received from Payment Providers

When you make a deposit or withdrawal through a supported mobile wallet (bKash, Nagad, Rocket, or Upay), bd3k receives a confirmation record from the payment provider. This confirmation contains:

• The masked mobile wallet number associated with the transaction (e.g. the last four digits of the bKash number).
• Transaction reference number, amount in BDT, and timestamp.
• Transaction status (confirmed, pending, or failed). bd3k does not receive or store full wallet numbers, PINs, or any payment credentials beyond what the provider's API transmits in its confirmation callback.

3How We Use Your Data

bd3k uses personal data only for clearly defined purposes. The table below maps each data use to its underlying purpose. We do not use personal data for purposes incompatible with those stated here without first seeking your explicit consent.

4Legal Basis for Processing

bd3k processes personal data on the following legal bases. Where processing is based on consent, you have the right to withdraw that consent at any time — though withdrawal will not affect the lawfulness of processing that occurred before withdrawal.

• Contractual necessity: processing required to fulfil our contract with you (e.g. maintaining your account, processing your transactions, delivering games).
• Legal obligation: processing required to comply with applicable law (e.g. retaining financial transaction records, responding to court orders).
• Legitimate interests: processing necessary for fraud prevention, platform security, and service improvement — where these interests are not overridden by your data protection rights.
• Consent: processing based on your explicit agreement, including optional communications such as promotional offers via SMS.

5Sharing Your Data

bd3k does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data may be shared in a limited set of circumstances, described below.

Game and Technology Providers

bd3k integrates games and platform technology from third-party providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, PG Soft, and Jili. These providers may receive session-level technical data (such as a hashed player identifier and stake amount) necessary to deliver the game round. They do not receive your name, mobile number, or payment details. Each provider operates under its own data processing agreement with bd3k and is bound by confidentiality obligations.

Payment Processors

To process deposits and withdrawals, bd3k communicates with mobile wallet providers including bKash, Nagad, Rocket, and Upay. These providers receive only the transaction data necessary to execute the payment — specifically the wallet number you have provided and the transaction amount. They do not receive your full account profile or gameplay history. These providers are independently regulated financial services entities and maintain their own privacy policies.

Legal and Regulatory Disclosure

bd3k may disclose personal data to law enforcement agencies, courts, regulatory bodies, or other government authorities where required to do so by applicable law or by a valid legal order. In such cases, bd3k will disclose only the minimum data required to satisfy the legal obligation and will, where legally permitted, notify the affected account holder that such a request has been received.

6Payment Data and Mobile Wallets

All financial transactions on bd3k are conducted in Bangladeshi Taka (BDT) through supported mobile wallet services. bd3k does not process card payments and does not store credit or debit card data of any kind. The payment data bd3k retains is limited to transaction reference numbers, BDT amounts, timestamps, and masked wallet identifiers — the minimum necessary to reconcile accounts, process withdrawal requests, and respond to transaction disputes.

bd3k requires that the mobile wallet used for deposits matches the registered account holder's mobile number. This one-to-one matching policy is a core fraud prevention measure and also ensures that withdrawals are returned to the correct wallet. Attempting to deposit from a wallet registered to a different person is a breach of our Terms & Conditions.

7Cookies and Tracking Technologies

bd3k uses cookies and similar lightweight tracking technologies to operate core Platform functions and improve the experience for players. We do not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling of any kind.

Essential Cookies

Essential cookies are required for bd3k to function. They maintain your login session, remember your language preference, and protect the Platform against cross-site request forgery (CSRF) attacks. Essential cookies cannot be disabled without breaking core functionality. They do not track your behaviour across other websites and contain no personally identifiable information beyond an encrypted session token.

Analytics Cookies

bd3k uses anonymised analytics to understand how players navigate the Platform — which pages are visited most, how long sessions last, and where players encounter friction. This data is aggregated and cannot be used to identify an individual player. Analytics data is used exclusively to improve Platform design and performance. If you prefer to opt out of analytics tracking, you may do so by adjusting your browser or mobile device settings to block non-essential cookies.

Managing Cookies

Most modern mobile browsers and Android/iOS devices allow you to view, delete, or block cookies through the browser's settings menu. Blocking essential cookies will prevent you from logging into your bd3k account. Blocking analytics cookies will not affect your ability to play games or make transactions. bd3k does not currently display an in-page cookie consent banner because we do not serve third-party advertising cookies that would legally require one under standard consent frameworks.

8Data Retention

bd3k retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data (profile, transaction history, gameplay records) is retained for the lifetime of the account and for a minimum of 5 years following account closure, in line with standard financial record-keeping requirements.
• KYC documents (identity verification materials) are retained for a minimum of 5 years after the date of submission, or longer if required by a legal hold or regulatory directive.
• Support communications are retained for 2 years from the date of the most recent message in each conversation thread, after which they are deleted from active systems and purged from backups within 90 days.

Where you request deletion of your personal data and no legal retention obligation prevents it, bd3k will complete the deletion within 30 days of receiving the verified request and will notify you by return message to your registered mobile number once deletion is confirmed.

9Security of Your Data

bd3k implements a layered security architecture to protect personal data at rest and in transit. All data transmitted between your device and bd3k's servers is encrypted using 256-bit SSL/TLS. Account passwords are hashed using a one-way cryptographic function — they cannot be reversed or read by bd3k staff. Sensitive account actions (such as changing a mobile number or requesting a large withdrawal) are subject to additional verification steps.

Access to personal data within bd3k's systems is restricted on a strict need-to-know basis. Support agents can view only the data necessary to resolve your query. No employee has unrestricted access to the full player database. All internal data access is logged and subject to periodic audit.

10Your Privacy Rights

As a bd3k account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact bd3k support using the official email address shown in Section 14 of this policy. bd3k will respond to all verified privacy rights requests within 30 days.

Right of Access

You have the right to request a copy of the personal data bd3k holds about you. Upon a verified request, we will provide a summary of your account data, transaction history, and any KYC documents on file in a readable format within 30 days.

Right to Rectification

You have the right to request correction of inaccurate personal data held about you. If your registered name, date of birth, or contact details are recorded incorrectly, contact support with the correct information and supporting documentation. Corrections to account-identifying fields may require additional identity verification.

Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing exists. This right is subject to bd3k's legal retention obligations — we cannot delete data that we are legally required to keep (such as financial transaction records). Where deletion is possible, bd3k will complete it within 30 days and confirm to you in writing.

Right to Restrict Processing

You have the right to request that bd3k restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data and we are verifying it, or where you have objected to processing based on legitimate interests and we are considering your objection. During the restriction period, bd3k will continue to store the data but will not use it for any purpose other than storage.

Right to Object to Marketing

If you have previously consented to receiving promotional communications from bd3k (such as bonus offer SMS notifications), you have the right to withdraw that consent at any time. To opt out of marketing communications, contact bd3k support with a clear written request to remove your number from promotional contact lists. Opt-out requests will be processed within 7 business days.

11Protection of Minors

bd3k does not knowingly collect personal data from any person under the age of 21. The Platform is strictly intended for adults aged 21 and above. During the registration process, bd3k collects date of birth to perform an age eligibility check. Where bd3k determines or has reasonable grounds to suspect that a registered account holder is under 21 years of age, the account will be suspended immediately pending investigation, and all associated personal data will be handled in accordance with applicable data protection requirements.

If you are a parent or guardian and believe a minor has registered an account on bd3k without your knowledge, please contact bd3k support immediately at [email protected]. We will investigate promptly and take appropriate action including account closure and data deletion where required.

12Third-Party Links

bd3k.app does not contain outbound links to third-party websites. All navigation on bd3k leads only to pages within the bd3k.app domain. bd3k is not responsible for the privacy practices of any external website that you may independently navigate to after leaving bd3k.app. This Privacy Policy applies solely to data processed by bd3k in connection with bd3k.app and the services offered therein.

13Changes to This Privacy Policy

bd3k reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes, we will update the "Last updated" date shown at the top of this page and, where practicable, notify registered account holders via their registered mobile number.

The most current version of this Privacy Policy is always available at bd3k.app/privacy-policy. Continued use of bd3k.app after any update to this policy constitutes your acceptance of the revised policy. If you do not accept the updated Privacy Policy, you must stop using the Platform and may request account closure by contacting support.

14Contact and Data Enquiries

For all privacy-related enquiries, data access requests, deletion requests, correction requests, or concerns about how bd3k handles your personal data, please contact our support team. bd3k aims to acknowledge all privacy enquiries within 24 hours of receipt and to resolve them fully within 30 days. For complex requests that require extended investigation, we will notify you of the expected resolution timeline within the initial 30-day period.

Contact bd3k support at: [email protected]