4bdt Privacy Policy

01 Data We Collect

4bdt collects personal data from you directly when you register an account, make a deposit or withdrawal, contact our support team, or participate in promotional activities. We also collect certain technical data automatically when you access the platform. The categories of personal data we collect are described below.

• Full legal name (as it appears on a government-issued photo ID).
• Date of birth (used to verify the 18+ age requirement).
• Registered email address and Bangladeshi mobile number.
• Residential address (city, district, postal code).
• A copy of a government-issued identification document (National ID card, passport, or driving licence) when requested during KYC verification.

• Your bKash, Nagad, Rocket, or Upay mobile wallet number (used for deposit and withdrawal processing).
• Transaction reference numbers, amounts, timestamps, and transaction status records.
• Account balance history and wagering records (maintained for responsible gaming monitoring and dispute resolution).

• IP address, device type, browser type and version, and operating system.
• Pages visited on 4bdt, session duration, game history, and click-path data.
• Time zone and approximate geographic location derived from IP address.
• Login timestamps and account activity logs.

• Records of support interactions, including email correspondence and live chat transcripts.
• Feedback, complaint, or dispute submissions.
• Marketing preference settings (e.g., whether you have opted in to receive promotional emails or SMS notifications).

02 How We Use Your Data

4bdt processes your personal data only for legitimate purposes directly connected to the operation of the platform and the delivery of services to you. We do not use your personal data for purposes incompatible with those stated at the time of collection. The primary purposes for which we use your data are:

Where 4bdt relies on your consent as the lawful basis for processing (specifically for promotional communications), you have the right to withdraw that consent at any time. You may update your marketing preferences within your account settings or by contacting support at [email protected]. Withdrawal of consent for marketing communications does not affect the lawfulness of processing that took place prior to withdrawal, and it does not affect your ability to use the platform.

03 Data Sharing & Disclosure

4bdt does not sell, rent, or trade your personal data to any third party. We share your personal data only in the limited circumstances described in this section, and only to the extent necessary to fulfil the stated purpose.

4bdt works with a limited number of carefully selected third-party service providers who process personal data on our behalf. These include:

• Payment processors: bKash, Nagad, Rocket, and Upay process financial transaction data in order to facilitate deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual data processing obligations with 4bdt.
• Game software providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other certified providers may receive a session token and anonymised player identifier to authenticate game sessions. These providers do not receive your full identity or contact data.
• Identity verification services: Where KYC verification is performed through a third-party provider, identity documents are shared with that provider under a strict data processing agreement and are not retained beyond the verification timeframe.
• Analytics providers: Anonymised or pseudonymised technical usage data may be processed by analytics tools to help 4bdt understand how the platform is used and how it can be improved. No personally identifiable data is passed to analytics providers.

4bdt may disclose personal data to law enforcement agencies, financial intelligence authorities, or other regulatory bodies where we are legally compelled to do so, or where disclosure is necessary to prevent fraud, money laundering, or other illegal activity. In such cases, 4bdt will disclose only the minimum data required to satisfy the legal obligation.

In the event of a merger, acquisition, or sale of all or part of 4bdt's business assets, personal data held by 4bdt may be transferred to the acquiring entity as part of that transaction. Players will be notified via email in advance of any such transfer that would result in a material change to how their personal data is processed, and will be given the opportunity to delete their account if they do not consent to the new processing arrangement.

04 Cookies & Tracking

4bdt uses cookies and similar local storage technologies on its platform. A cookie is a small text file placed on your device by a website when you visit it. Cookies help the platform function correctly, remember your preferences, and provide us with aggregated usage statistics. 4bdt does not use cookies to track your activity across unrelated third-party websites.

The categories of cookies used by 4bdt are as follows:

Strictly necessary cookies cannot be disabled, as they are required for basic platform functionality. Functional and analytics cookies can be controlled through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please note that blocking certain cookies may affect the performance of the 4bdt platform or prevent some features from working correctly.

05 Data Retention

4bdt retains personal data for as long as your account remains active and for a period thereafter as required by applicable legal, regulatory, and operational obligations. We do not retain personal data beyond the periods necessary for the purposes for which it was collected.

The following retention periods apply as a general guideline:

• Active account data (identity, contact, payment method details): Retained for the duration of your account and for a minimum of 5 years after account closure, in compliance with financial record-keeping and anti-money-laundering obligations.
• Transaction records (deposit and withdrawal history, wagering records): Retained for a minimum of 5 years from the date of each transaction.
• KYC identity documents: Retained for the period required to satisfy identity verification obligations and then securely deleted. Copies of ID documents are not retained longer than necessary.
• Support communications: Retained for 2 years from the date of the last interaction, unless the communication relates to a dispute or legal matter that requires longer retention.
• Marketing preference records: Retained for 3 years from the date you last interacted with a 4bdt promotional communication, or until you withdraw consent, whichever is earlier.
• Analytics and usage data (anonymised): May be retained indefinitely in aggregated, non-identifiable form for platform improvement purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to a specific individual. If you request early deletion of your personal data (see Section 07 below), 4bdt will honour that request except where retention is required by law or is necessary to defend a legal claim.

06 Data Security

4bdt implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure is designed to meet the standards expected of a trusted online platform serving the Bangladeshi gaming audience.

Key security measures implemented by 4bdt include:

• TLS/SSL encryption: All data transmitted between your browser or mobile device and the 4bdt platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. The padlock icon in your browser address bar confirms an active encrypted connection.
• Data-at-rest encryption: Personal data stored in 4bdt's databases is encrypted at rest. Database access is restricted to authorised personnel only, using role-based access controls and strong authentication requirements.
• Two-factor authentication (2FA): Players are encouraged — and in certain high-risk scenarios required — to enable SMS-based 2FA on their 4bdt accounts. Internal staff access to systems containing personal data requires 2FA without exception.
• Penetration testing & vulnerability management: 4bdt conducts periodic security assessments and vulnerability scans to identify and address potential weaknesses in the platform's security posture.
• Access controls: Access to personal data within 4bdt's organisation is restricted to staff whose job function requires it. All staff with access to personal data are bound by confidentiality obligations and receive data protection training.
• Incident response: 4bdt maintains a data breach response procedure. In the event of a security incident that puts your personal data at risk, affected players will be notified without undue delay.

07 Your Privacy Rights

As a 4bdt player, you have the following rights in relation to the personal data we hold about you. These rights are subject to certain limitations where legal obligations or legitimate platform interests apply, but 4bdt is committed to honouring these rights promptly and transparently.

• Right of access: You have the right to request a copy of the personal data 4bdt holds about you, along with information on how that data is used and with whom it has been shared. Access requests are fulfilled within 30 days.
• Right to rectification: If personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details (such as contact email and mobile number) directly in your account settings.
• Right to erasure: You may request that 4bdt delete your personal data. We will honour this request where no legal or contractual obligation requires us to retain the data. Note that deletion requests cannot be fulfilled while an account balance remains, or while a disputed transaction is under investigation.
• Right to restrict processing: In certain circumstances, you may request that 4bdt stop processing your personal data while retaining it — for example, while a data accuracy dispute is resolved.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format and to transfer that data to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where 4bdt relies on legitimate interests as the lawful basis. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, submit a written request to the 4bdt support team at [email protected] with the subject line "Privacy Rights Request". Please include your registered account email address and a brief description of the right you wish to exercise. 4bdt will respond within 30 days. For complex or high-volume requests, the response period may be extended by a further 30 days, in which case you will be notified of the extension.

08 Policy Updates

4bdt reviews and updates this Privacy Policy periodically to reflect changes in platform features, data processing practices, applicable law, and regulatory guidance. The effective date at the top of this page indicates when the current version was last revised.

When material changes are made to this Privacy Policy — such as a new category of data being collected, a new third-party processor being engaged, or a change in data retention periods — 4bdt will notify registered players via email to the address associated with their account. We will provide at least 14 days' notice before material changes take effect, giving you time to review the revised policy and, if you do not agree, close your account in accordance with the account closure process described in the Terms & Conditions.

Non-material changes — such as typographical corrections, clarifications of existing practices, or structural reformatting — may be made without advance notice. Your continued use of the 4bdt platform after any update to this Privacy Policy constitutes acceptance of the revised policy.

All previous versions of this Privacy Policy are superseded by the current published version. If there is any inconsistency between a summarised or translated version of this policy and the original English-language text, the English version takes precedence.

For privacy-related questions not addressed in this policy, contact the 4bdt support team at [email protected]. Our team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).