bdtfan Privacy Policy —
Your Data, Your Rights

When you interact with the bdtfan platform — whether by registering an account, making a deposit, placing a bet, contacting support, or simply browsing the site — we may collect personal data across several categories. The following table summarises the categories of data we collect, the source of that data, and the lawful basis on which we process it.

bdtfan uses the personal data we collect for specific, documented purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected without providing prior notice. The primary purposes for which bdtfan processes your personal data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and process your login sessions securely.
• Payment processing: To receive deposits via bKash, Nagad, Rocket, Upay, Visa, or Mastercard and to execute withdrawal requests to your verified payment method. Financial transaction records are retained to satisfy anti-money-laundering (AML) obligations.
• Service delivery: To provide access to the bdtfan games library, sports betting markets, live casino lobby, and all other platform features you use.
• Customer support: To respond to your enquiries via live chat, email, or WhatsApp; to investigate complaints; and to resolve disputes fairly and in a timely manner.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling behaviour, to apply deposit limits or cooling-off periods you have requested, and to enforce self-exclusion periods.
• Fraud prevention and security: To detect and investigate suspicious login activity, unusual transaction patterns, multi-account creation, and other potential violations of the bdtfan Terms & Conditions.
• Legal and regulatory compliance: To fulfil bdtfan's obligations under applicable anti-money-laundering principles, to respond to lawful requests from competent authorities, and to maintain records as required by law.
• Platform improvement: To analyse aggregated, anonymised usage data to identify technical issues, improve game performance, and enhance the overall bdtfan player experience.
• Promotional communications: With your explicit consent, to send you information about new games, seasonal promotions (Eid, Pohela Boishakh, BPL season), and personalised bonus offers via SMS, email, or push notification. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

bdtfan does not sell, rent, or trade your personal data. We share your information with third parties only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

• Payment service providers: bKash, Nagad, Rocket, Upay, and card-processing partners receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for the data they hold.
• Game studios and content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your anonymous session identifier and game-event data to deliver game content and resolve technical disputes. They do not receive your name, contact details, or financial data.
• Identity verification providers: Third-party KYC services may receive copies of the identity documents you submit during verification. These providers are contractually bound to process your documents only for the purpose of verification and to delete them promptly thereafter.
• Analytics providers: Aggregated, anonymised usage statistics may be shared with analytics tools to help bdtfan understand platform performance. No personally identifiable information is included in these data sets.
• Legal and regulatory authorities: bdtfan will disclose personal data to law enforcement, courts, or regulatory bodies where required by a lawful order, subpoena, or regulatory directive. bdtfan will notify you of such a disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of bdtfan's business assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer before it takes effect.

The bdtfan website uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics data. A cookie is a small text file placed on your device by a website you visit. The cookies bdtfan uses fall into the following categories:

• Strictly necessary cookies: These cookies are essential for you to navigate the bdtfan platform and use its core features, such as maintaining your logged-in session. They cannot be disabled without breaking the platform's functionality.
• Functional cookies: These cookies remember your preferences — such as your language setting (English) and your preferred payment method — so you do not have to re-enter them on every visit.
• Analytics cookies: These cookies collect anonymised information about how players use the bdtfan platform, such as which game categories are most visited and which pages generate the most support queries. This data helps bdtfan improve the service.
• Security cookies: These cookies help bdtfan detect and prevent fraudulent login attempts, bot activity, and cross-site request forgery attacks. They are strictly necessary for platform security and cannot be disabled.

You can manage or delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your bdtfan account. Disabling functional cookies will mean your preferences are not remembered between sessions. Disabling analytics cookies will not affect your ability to use any part of the platform.

bdtfan retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law or regulation. The following retention periods apply as a general guide:

When personal data reaches the end of its applicable retention period, bdtfan securely deletes or anonymises it so that it can no longer be associated with any individual. Anonymised data — which cannot be re-identified — may be retained indefinitely for statistical and platform improvement purposes.

bdtfan employs a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes, but is not limited to, the following measures:

• TLS 1.3 encryption on all data transmitted between your browser or mobile app and bdtfan servers, indicated by the padlock icon in your browser address bar.
• AES-256 encryption at rest for all databases containing personal and financial data.
• Role-based access controls (RBAC) limiting staff access to personal data to only those whose role genuinely requires it. No member of the bdtfan support team has access to your password in any readable form.
• Two-factor authentication (2FA) available for all player accounts and mandatory for all staff accounts with access to player data.
• Regular penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Web Application Firewall (WAF) and DDoS mitigation to protect platform availability and prevent injection attacks.
• Segregated payment data handling — bdtfan does not store full card numbers, CVVs, or mobile banking PINs. All sensitive payment credentials are handled exclusively by the respective payment processor.

As a bdtfan player, you have a number of rights with respect to your personal data. bdtfan is committed to honouring these rights promptly and without unnecessary complexity. To exercise any of the rights listed below, contact us at [email protected] with the subject line "Privacy Rights Request" and a description of your request.

The bdtfan platform is strictly intended for individuals aged 18 and above. We do not knowingly collect, store, or process personal data relating to anyone under the age of 18. Age verification is a core step in the bdtfan registration and KYC process precisely to prevent underage access.

If bdtfan becomes aware that personal data belonging to a person under the age of 18 has been collected — whether through a misrepresentation at registration or through a parental report — we will immediately and permanently delete all such data and close the associated account. Any funds held in the account will be returned to the depositing payment source after an appropriate investigation.

bdtfan reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or operational improvements to the platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

When we make material changes to this Privacy Policy — changes that meaningfully affect how we collect, use, or share your personal data — we will notify you via the email address registered to your bdtfan account and/or by displaying a prominent notice on the platform at your next login. Your continued use of bdtfan following such notification constitutes acceptance of the revised policy.

We encourage all players to review this Privacy Policy periodically, particularly before making a significant deposit or engaging with a new platform feature. Previous versions of this Privacy Policy are available upon written request to [email protected].

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a data concern, please reach out to the bdtfan data team using the contact details below. All privacy-related enquiries are treated with the highest priority and handled with full confidentiality.

bdtfan is committed to resolving all privacy concerns directly and transparently. If you feel that a concern has not been adequately addressed after contacting our team, you retain the right to escalate the matter through appropriate channels available to you.