Bdtok Privacy Policy — Your information is completely safe with us

01Why this policy exists and who it applies to

The information you share while using bdtok (bdtok.bet) is a trust placed in us. This Privacy Policy explains how we honour that trust. It applies to all users in Bangladesh — registered or not — who access the bdtok website or app.

We know most people skip long privacy policy pages. That's why bdtok's policy is written in plain, straightforward English. If you have any questions, just ask our support team.

02What information we collect

Bdtok only collects what is necessary to provide its services. The data falls into two categories — what you provide directly and what is collected automatically.

Information provided directly by you:

• Name, date of birth, and gender (collected at registration)
• Mobile number and email address
• National ID or passport number (for KYC verification)
• Payment details — Mobile Pay/Nagad number or bank account (for transactions)
• Information provided when contacting support

Automatically collected information:

• Device type, operating system, and browser version
• IP address and approximate location
• A log of which pages you visited on the site and for how long
• Transaction history and betting activity records
• Cookie & session data (see the Cookies section below for details)

03How your information is used

Collected data is used only for its stated purpose. Using any information for unrelated purposes is against bdtok's policy.

Bdtok never sells your information to advertisers or allows third parties to use it for marketing purposes.

04Who your information may be shared with

Bdtok may share information with third parties in limited circumstances. Each case has a specific, controlled reason.

• Payment provider: Only the information required to process transactions is shared with Mobile Pay, Nagad, Rocket, or your bank.
• Game software providers: Only the information necessary to operate games is shared with partners such as Evolution and Pragmatic Play.
• Regulatory authority: Information may be disclosed in response to legal claims or government directives.
• Security expert: We work with select specialist agencies for fraud prevention — all bound by confidentiality agreements.

Your information is not shared with any party outside of those listed above. Every third party is contractually required to maintain data protection standards equivalent to our own.

05Cookies and tracking technologies

Cookies are small files stored in your browser. bdtok uses cookies to improve service quality and personalize your experience.

Cookies we use:

• Essential cookies: Login sessions and security tokens are essential for the site to function and cannot be disabled.
• Preference cookies: Language selection and theme preferences — disabling these means you'll need to reset them every visit.
• Analytics cookies: Used to understand which pages are visited most — these can be turned off.

You can manage cookies through your browser settings. Please note that disabling certain cookies may limit some features of the site.

06Data retention

Bdtok only retains data that is strictly necessary. However, certain information must be kept for a defined period to meet legal and business obligations.

• Account information: For the duration of your active account + 5 years after closure (financial regulatory requirement).
• Transaction records: 7 years (tax and financial regulations).
• KYC documents: 5 years after account closure.
• Support chat: 2 years.
• Website logs: 90 days.

Once the above retention periods expire, data is automatically deleted or anonymized.

07Your rights

You have full control over your data. bdtok respects all of these rights.

• Right to access: Request a copy of the data we hold on you at any time.
• Right to rectification: You can request a correction if any of your information is inaccurate.
• Right to erasure: You can request deletion of your data where there is no legal obligation to retain it.
• Right to restrict processing: Request to stop using your data for a specific purpose.
• Right to data portability: Request a copy of your data in a structured, portable format.
• Right to object: Right to opt out of marketing communications.

08Security measures

Bdtok uses industry-leading technology to protect your data. That said, no one can guarantee 100% security on the internet — and we believe in being upfront about that.

• 256-bit SSL/TLS encryption on all connections.
• Passwords are stored using bcrypt hashing — no one can view your password in plain text.
• Payment card data is stored in a separate tokenized system in compliance with PCI-DSS standards.
• Two-factor authentication (2FA) is available to enable on all accounts.
• If a suspicious login is detected, the account is locked immediately and the user is alerted.
• Regular penetration testing and vulnerability scanning.

In the event of a data breach, affected users will be notified within 72 hours and prompt remedial action will be taken.

09Protection of minors' data

Bdtok strictly does not serve users under 18. We do not knowingly collect any data from minors.

If a user is suspected to be under 18, their account is verified immediately. If confirmed, the account is closed and any collected data is deleted.

10Policy updates and contact

Bdtok may update this Privacy Policy from time to time. When changes are made:

• You will be notified via your registered email or SMS.
• The "Last updated" date at the top of the page will reflect the change.
• For significant changes, you will be asked to consent to the updated policy via a popup upon login.

For any privacy-related questions, concerns, or requests to exercise your rights, please get in touch. We're always ready to help.