bdtgem Privacy Policy

1. Introduction & Scope

This Privacy Policy (the "Policy") describes how bdtgem ("we", "us", or "our") collects, processes, stores, and discloses personal data obtained from individuals ("you" or "your") who access or use the bdtgem online gaming platform at bdtgem.app (the "Platform"). This Policy applies to all users of the Platform, including registered account holders, visitors who browse without registering, and individuals who contact our support team.

By registering an account, making a deposit, placing a wager, or otherwise using any service on the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

This Policy should be read alongside the bdtgem Terms & Conditions and Responsible Gaming policy, both of which form part of your agreement with bdtgem.

🔐 Privacy Principles at a Glance

The following cards summarise the core principles governing how bdtgem handles your personal data. Full details appear in the numbered sections below.

2. Personal Data We Collect

bdtgem collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third-party service providers where necessary for identity verification and fraud prevention.

The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (National ID, passport, or driving licence number) provided during registration or KYC verification.
• Contact Data: Mobile phone number, email address, and residential address (city, district, postal code) in Bangladesh or elsewhere.
• Financial Data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details provided for withdrawal purposes, and transaction history including deposit amounts, withdrawal amounts, and wagering records.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and session timestamps collected automatically when you access the Platform.
• Usage Data: Pages visited, games played, bet amounts, session duration, navigation paths, and feature interactions recorded for analytics and fraud detection purposes.
• Communications Data: Records of communications between you and the bdtgem support team, including live chat transcripts, email correspondence, and any documents you submit.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications, including preferred communication channel (email or SMS).

3. How We Use Your Data

bdtgem processes your personal data on the following legal bases and for the following purposes:

4. Data Sharing & Disclosure

bdtgem shares personal data only with trusted categories of recipients where it is strictly necessary to deliver our services, comply with legal obligations, or protect the integrity of the Platform. All third-party recipients are contractually bound to process your data only for the specified purpose and to maintain appropriate security standards.

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive the minimum data required to authenticate and complete your deposit or withdrawal transaction.
• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player session token to deliver game content. They do not receive your full name, contact details, or financial data.
• Identity Verification Partners: Third-party KYC providers may process your identity documents to verify your age and identity. These partners are bound by strict data processing agreements.
• Fraud Prevention Services: Specialist fraud detection providers may receive technical and usage data (IP address, device fingerprint, session behaviour) to identify suspicious activity.
• Legal & Regulatory Authorities: bdtgem will disclose personal data to law enforcement, regulatory bodies, or other government agencies where required by applicable law, court order, or to protect the rights and safety of bdtgem and its users.
• Professional Advisers: Legal counsel, accountants, and auditors may access personal data on a strictly confidential basis as necessary to provide professional services to bdtgem.

bdtgem does not transfer personal data to recipients outside of the territories in which our service partners operate without ensuring that appropriate safeguards are in place. Where international data transfers occur, they are governed by contractual clauses that provide equivalent protection to the standards applicable in our operating jurisdiction.

5. Cookies & Tracking Technologies

When you access the bdtgem Platform, certain information is collected automatically through cookies and similar technologies. A cookie is a small text file placed on your device by the Platform that enables the site to recognise your browser on return visits and retain session information.

• Strictly Necessary Cookies: Required for the Platform to function. These maintain your login session, store your language preference, and preserve your game state. They cannot be disabled without breaking core functionality.
• Analytical Cookies: Where you have consented, these cookies collect anonymised data about how you interact with the Platform (pages visited, session length, navigation flow) to help us improve the service. No personally identifiable information is transmitted via analytical cookies.
• Security Cookies: Used to detect and prevent fraudulent activity, including CSRF protection tokens and bot-detection signals. These are classified as strictly necessary and are always active.

bdtgem does not deploy advertising cookies, retargeting pixels, or any cookie that tracks your behaviour across third-party websites. You may review and manage cookie settings through your browser's privacy controls. Note that disabling strictly necessary cookies will impair the Platform's ability to maintain your login session and process transactions correctly.

6. Data Retention

bdtgem retains personal data only for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable law. The following retention periods apply as general guidelines:

• Account & Identity Data: Retained for the duration of your active account and for a minimum of 5 years following account closure, in compliance with anti-money-laundering (AML) and financial record-keeping requirements.
• Transaction Records: Retained for a minimum of 5 years following each transaction, as required by financial regulations.
• KYC Verification Documents: Retained for a minimum of 5 years following the verification event, or longer if required by applicable law.
• Support Communications: Retained for 3 years from the date of last contact, to support dispute resolution and service improvement.
• Marketing Preferences: Retained until you withdraw consent, after which marketing data is deleted within 30 days.
• Technical & Usage Logs: Retained for up to 12 months for fraud detection and analytics purposes, then anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Where anonymisation is not technically feasible, data is securely destroyed.

7. Your Privacy Rights

As a user of the bdtgem Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will acknowledge your request within 2 business days and respond substantively within 14 business days of receipt.

• Right of Access: You may request a copy of the personal data bdtgem holds about you, along with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details, you may also update certain information directly through your Account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. This right is subject to bdtgem's legal obligation to retain certain records (e.g., AML and financial records) for the periods described in Section 6.
• Right to Restrict Processing: You may request that bdtgem temporarily suspend processing of your personal data in certain circumstances — for example, while a rectification request is under review.
• Right to Object: You may object to processing carried out on the basis of legitimate interest, including profiling for fraud detection. bdtgem will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contract, you may request a copy of your personal data in a structured, machine-readable format.

8. Data Security

bdtgem implements a multi-layered security framework to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive personal data fields (identity document numbers, payment identifiers) at rest within our databases.
• Role-based access controls ensuring that only personnel with a documented business need can access personal data.
• Comprehensive audit logging of all access to personal data records.
• Regular third-party penetration testing and vulnerability assessments of the Platform infrastructure.
• Incident response procedures including prompt notification to affected users in the event of a confirmed data breach that poses a material risk.

Despite these measures, no internet transmission or electronic storage system is entirely without risk. You are responsible for maintaining the security of your own account credentials. If you believe your account has been compromised, contact [email protected] immediately.

9. Minors & Age Restriction

The bdtgem Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will delete that data immediately and close the associated account without notice.

If you believe that a minor has registered on the Platform or that bdtgem holds personal data relating to a minor, please notify us immediately at [email protected] so that we can take prompt corrective action.

10. Policy Updates

bdtgem reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users via email or in-platform notification at least 7 days before the revised Policy takes effect. The updated Policy will be published on this page with a revised effective date.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically. Previous versions of this Policy are available on request from [email protected].

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdtgem handles your personal data, please contact our support team. All privacy-related enquiries are treated with the highest priority and handled in strict confidence.