bdtfan Privacy Policy

When you interact with bdtfan, we may collect the following categories of personal information:

• Identity data: Full legal name, date of birth, gender, and nationality, collected during account registration and identity verification.
• Contact data: Mobile phone number and email address, used to communicate account-related information and, with your consent, promotional offers.
• Financial data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard) used for deposits and withdrawals. Full payment credentials are not stored on bdtfan servers — they are processed by certified payment gateways.
• Identity verification documents: Copies of government-issued photo ID (National ID card, passport, or driving licence) and, where required, proof of address, submitted during the KYC (Know Your Customer) process.
• Technical data: IP address, device type, browser type, operating system, session duration, pages visited, and referring URL, collected automatically via server logs and cookies.
• Transaction data: Full history of deposits, withdrawals, bets placed, games played, bonuses claimed, and winnings received.
• Communications data: Records of your correspondence with our customer support team, including chat logs and email exchanges.

bdtfan processes your personal data for the following purposes, each of which rests on a lawful basis:

• Account management: To create, maintain, and administer your player account, including identity verification, password resets, and account security monitoring.
• Payment processing: To facilitate deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to verify that payment methods belong to the account holder.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, bonus abuse, multi-accounting, and other prohibited conduct.
• Responsible gaming compliance: To monitor wagering patterns that may indicate problem gambling behaviour and to enforce self-exclusion, deposit limits, and cooling-off periods set by the player or by bdtfan.
• Customer support: To respond to your enquiries, complaints, and requests via email and live chat.
• Marketing and promotions: To send you personalised offers, bonus notifications, and event promotions (BPL season, Eid specials, Pohela Boishakh offers) where you have consented to receive such communications.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the performance, design, and game selection of the bdtfan platform.
• Legal and regulatory obligations: To maintain transaction records and comply with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.

bdtfan uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences, and gather analytical data about site usage. The categories of cookies in use are as follows:

• Essential cookies: Required for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled.
• Functional cookies: Remember your language preferences, display settings, and recent game selections to personalise your experience.
• Analytics cookies: Collect anonymised data on page visits, session lengths, and navigation paths to help bdtfan understand how players use the platform and identify areas for improvement.
• Security cookies: Used to detect and prevent fraudulent login attempts and unusual access patterns.

You may disable non-essential cookies through your browser settings. Disabling functional cookies may affect your experience on the bdtfan platform but will not prevent you from accessing core features.

bdtfan does not sell your personal data. We share your information only in the following limited circumstances:

• Payment processors: Financial data is shared with certified payment gateway providers (including mobile wallet operators and card networks) solely for the purpose of processing your deposits and withdrawals.
• Game software providers: Certain technical identifiers (such as a pseudonymous player ID) may be shared with third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to enable game sessions. These providers do not receive your full personal profile.
• Identity verification services: During the KYC process, your identity documents may be reviewed by a third-party verification partner operating under strict confidentiality obligations.
• Fraud prevention networks: In cases of suspected fraud or money laundering, relevant data may be shared with industry-wide fraud prevention organisations.
• Legal authorities: bdtfan will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or in response to a valid legal process.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets of bdtfan, player data may be transferred to the successor entity, subject to the same data protection obligations set out in this Policy.

bdtfan retains your personal data for as long as your account remains active and for a defined period thereafter, depending on the category of data and the legal basis for retention:

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

bdtfan implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key technical and organisational measures include:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and bdtfan servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Multi-factor authentication (MFA) options available for player accounts to reduce the risk of unauthorised login.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Role-based access controls ensuring that only authorised bdtfan staff can access personal data, and only to the extent required for their specific duties.
• Automated monitoring systems that flag unusual login activity, large or atypical withdrawal requests, and other potential security incidents in real time.

While we employ rigorous security practices, no digital platform can guarantee absolute security. In the unlikely event of a data breach affecting your personal information, bdtfan will notify affected players promptly and take all necessary steps to mitigate harm.

As a bdtfan player, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected]. We will respond within 30 calendar days.

• Right of access: Request a copy of the personal data bdtfan holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to restriction: Request that we restrict the processing of your data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: Request a structured, machine-readable copy of your personal data for transfer to another service provider.
• Right to object: Object to the processing of your personal data for direct marketing purposes at any time, with immediate effect.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bdtfan is strictly for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage user, we will immediately close the associated account, delete all personal data collected, and reverse any transactions where technically possible.

If you believe that a person under 21 has registered on bdtfan using false information, please notify us immediately at [email protected].

Some of bdtfan's technology partners and game software providers operate servers located outside Bangladesh. When personal data is transferred to these partners, bdtfan ensures that appropriate contractual safeguards are in place — such as data processing agreements containing standard contractual clauses — to maintain an equivalent level of data protection regardless of where the data is processed.

bdtfan does not transfer your personal data to any country or organisation that does not provide an adequate level of data protection as assessed against the standards described in this Policy.

bdtfan reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, technology, legal obligations, or business operations. When material changes are made, we will publish the revised Policy on this page with an updated effective date. Where changes significantly affect your rights, we may also notify you directly via email.

Your continued use of bdtfan following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically.