bdt499 Privacy Policy
for Bangladeshi Players

1 Introduction

bdt499 is Bangladesh's premier online casino and sports betting platform, operating under the domain bdt499.biz and serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh. We are committed to protecting and respecting the privacy of every player who entrusts us with their personal information.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by bdt499. Please read this document carefully to understand our practices regarding your personal data and how we will treat it. This policy applies to all players, visitors, and registered users of the bdt499 platform, regardless of the device or method used to access our services.

The platform is intended exclusively for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a minor, we will take immediate steps to delete that data and close the associated account.

2 Data Controller

For the purposes of applicable data protection law, bdt499 acts as the data controller in respect of the personal data of its registered players and site visitors. As data controller, bdt499 determines the purposes and means by which personal data is processed.

All enquiries relating to the processing of your personal data, including requests to exercise your data subject rights, should be directed to the bdt499 Data Support Team via the contact details provided in Section 15 of this policy. We will acknowledge receipt of your request and respond substantively within a reasonable period, and in any event within thirty (30) calendar days.

3 Personal Data We Collect

bdt499 collects the following categories of personal data from players. We collect only what is necessary and proportionate to the purpose for which it is being processed.

3.1 Identity & Contact Data

• Full legal name as it appears on a government-issued identification document.
• Date of birth (used to verify the player is 18 years of age or older).
• Residential address within Bangladesh.
• Mobile telephone number (used for account verification and support).
• Email address (used for account communications and notifications).

3.2 Financial & Payment Data

• Mobile Financial Service (MFS) account details associated with bKash, Nagad, Rocket, or Upay accounts used for BDT deposits and withdrawals.
• Bank account details where bank transfer is used as a payment method (Dutch-Bangla Bank, BRAC Bank, City Bank, and other partner institutions).
• Transaction history — deposit amounts, withdrawal amounts, dates, and reference numbers. All monetary values are in Bangladeshi Taka (৳).

3.3 Account Activity Data

• Username and encrypted password hash.
• Game play history, including game titles, stake amounts, win/loss outcomes, and session durations.
• Bonus claims, wagering progress, and promotional interaction history.
• Responsible gaming tool settings, including any active deposit limits, cooling-off periods, or self-exclusion records.
• Customer support communication records, including live chat transcripts and email correspondence.

3.4 Technical & Device Data

• IP address at the time of registration and login.
• Device type, operating system, and browser type and version.
• Session timestamps (login time, logout time, session duration).
• Referring URL (the page or source from which you arrived at bdt499.biz).
• Geolocation data (country and city level, derived from IP address — not GPS).

3.5 Verification Documents

• Copies of government-issued identification documents submitted during Know Your Customer (KYC) verification.
• Proof of address documents (utility bills, bank statements, official correspondence).
• Screenshots or documentation confirming ownership of MFS payment accounts.

4 How We Collect Your Data

bdt499 collects personal data through the following primary channels:

• Registration Form: When you create a bdt499 account, you provide identity and contact data directly through the registration interface.
• Deposits and Withdrawals: Financial data is collected when you initiate a BDT transaction via bKash, Nagad, Rocket, Upay, or bank transfer through the bdt499 cashier.
• KYC Verification: Document data is collected when you submit identity and address verification documents in response to a KYC request from the bdt499 compliance team.
• Platform Usage: Account activity data is generated automatically as you navigate the platform, play games, claim bonuses, and interact with features.
• Customer Support: Data is collected when you contact the bdt499 support team via live chat, email, or WhatsApp.
• Cookies and Tracking Technologies: Technical and device data is collected automatically via cookies and similar tracking tools when you visit bdt499.biz. See Section 7 for full details.

5 How We Use Your Personal Data

bdt499 processes your personal data for the following specific purposes:

bdt499 does not use personal data for automated decision-making that produces legal or similarly significant effects on players without human review. Any automated flagging of accounts — for example, for suspected fraud or bonus abuse — is reviewed by a member of the compliance team before action is taken.

6 Legal Basis for Processing

bdt499 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing that is necessary to provide the services you have registered for — including account management, payment processing, and game access — is carried out on the basis that it is required to perform our contract with you.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform analytics, and operational improvement is carried out on the basis of bdt499's legitimate business interests, balanced against your privacy rights. We have assessed that these interests do not override your fundamental right to privacy.
• Legal Obligation: Processing required to comply with applicable legal obligations — such as KYC verification, anti-money laundering checks, and responding to lawful requests from authorities — is carried out on the basis of compliance with a legal obligation.
• Consent: Processing for optional promotional communications (such as email marketing, bonus alerts, and seasonal offer notifications) is carried out on the basis of your explicit consent, which may be withdrawn at any time by contacting the support team or updating your account communication preferences.

7 Cookies & Tracking Technologies

bdt499 uses cookies and similar tracking technologies on the bdt499.biz website to improve your experience, maintain session continuity, and gather analytical data about platform usage. The following types of cookies are used:

• Essential Cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in, security tokens that prevent cross-site request forgery, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Analytical Cookies: Used to collect anonymised data about how players navigate the platform — which pages are visited most frequently, how long sessions last, and where users exit. This data is aggregated and does not identify individual players. Used to improve the platform experience.
• Functional Cookies: Used to remember your preferences, such as language setting (English), currency display (BDT / ৳), and responsible gaming reminder settings, so you do not need to reconfigure them on each visit.
• Performance Cookies: Used to monitor platform stability, load times, and error rates. Data collected supports technical operations and is not linked to individual player identities.

By continuing to use the bdt499 platform after being informed of our cookie practices, you consent to the use of non-essential cookies as described above. You may adjust your browser settings to refuse cookies, but doing so may limit certain features of the bdt499 platform, including maintained login sessions and preference memory.

8 Sharing Your Data with Third Parties

bdt499 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share personal data with the following categories of third parties strictly for the purposes outlined in this policy:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and partner banking institutions receive the minimum financial data necessary to process your BDT deposit or withdrawal transactions. These providers operate under their own privacy policies and data security obligations.
• Game Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session data (stake amounts, game results) necessary to deliver game services. Game providers do not receive your personally identifiable information.
• Identity Verification Services: Where third-party KYC or document verification services are used to assist with identity checks, the minimum necessary data is shared under strict data processing agreements.
• Legal and Regulatory Authorities: bdt499 may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts in response to a valid legal request, court order, or applicable legal obligation. bdt499 will endeavour to notify the player of any such disclosure where legally permitted to do so.
• Fraud Prevention Services: Where bdt499 uses third-party fraud detection tools, anonymised or pseudonymised technical data (such as IP addresses and device fingerprints) may be shared with those services for security analysis purposes.

9 Data Retention

bdt499 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule provides a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted from bdt499 systems or rendered permanently anonymous such that it can no longer be associated with an identifiable individual. Players who request account closure may also request accelerated deletion of non-legally-required data by contacting the support team.

10 Your Data Subject Rights

As a player whose personal data is processed by bdt499, you hold the following rights in relation to your personal data. These rights may be exercised by submitting a written request to the bdt499 Data Support Team using the contact details in Section 15:

• Right of Access: You have the right to request a copy of the personal data bdt499 holds about you, along with information about how that data is being used. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Basic account details such as contact number and address may also be updated directly through your account profile.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to any legal retention obligations that require bdt499 to retain certain data for a defined period.
• Right to Restriction: You have the right to request that bdt499 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested or while a legitimate interest objection is being assessed.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests where you believe your individual privacy rights outweigh those interests. You also have the unconditional right to opt out of direct marketing communications at any time.
• Right to Data Portability: Where personal data is processed by automated means on the basis of a contract or consent, you have the right to receive that data in a structured, commonly used, machine-readable format.

bdt499 will respond to all valid data subject rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty days, in which case you will be notified of the extension and the reason for it. There is no charge for exercising your data subject rights, except in cases of manifestly unfounded or excessive requests, in which case a reasonable administrative fee may be applied.

11 Data Security

bdt499 takes the security of your personal data seriously and has implemented a range of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• End-to-end 256-bit SSL/TLS encryption for all data transmitted between your device and the bdt499 platform.
• Encrypted storage of all sensitive personal data, including identity documents and financial records, on secured servers with restricted access controls.
• Multi-factor authentication options for player account login, reducing the risk of unauthorised account access.
• Regular internal security reviews and vulnerability assessments of the bdt499 platform infrastructure.
• Strict internal access controls limiting access to personal data to authorised personnel on a need-to-know basis.
• Employee training on data protection obligations and secure data handling practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bdt499 will notify affected players without undue delay and take all reasonable steps to contain the breach and mitigate its impact. No security system is entirely impenetrable; you are also responsible for maintaining the security of your own account credentials and reporting any suspected unauthorised access promptly.

12 Children's Privacy

If you are a parent or guardian and believe that a person under the age of 18 has submitted personal data to bdt499 or created a bdt499 account, please contact us immediately using the details in Section 15. Upon receiving credible notification, bdt499 will promptly investigate, close the account, delete all associated personal data, and reverse any transactions where technically and legally possible.

bdt499 employs age verification procedures at the point of registration and during KYC checks to minimise the risk of underage access. Players who provide false information about their age to gain access to the platform are in breach of the bdt499 Terms & Conditions and will have their account closed with all associated funds forfeited.

13 International Data Transfers

The bdt499 platform primarily serves players located in Bangladesh, and the majority of data processing takes place within systems designed to support this market. However, some third-party service providers — including certain game studio platforms and technical infrastructure providers — may process data on servers located outside Bangladesh.

Where personal data is transferred outside of Bangladesh, bdt499 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections applicable within Bangladesh. Safeguards may include contractual data protection clauses, data processing agreements, and assessments of the receiving country's data protection standards.

If you have questions about the specific safeguards in place for any particular international data transfer, you may request this information by contacting the bdt499 Data Support Team.

14 Changes to This Privacy Policy

bdt499 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. The effective date shown at the top of this document will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect your rights or the way we process your personal data — bdt499 will provide at least seven (7) days' advance notice to registered players via their registered contact details before the changes take effect. Minor administrative or clarificatory changes may be made without advance notice.

Your continued use of the bdt499 platform following notification of changes to this policy constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you should cease using the platform and may request account closure in accordance with the bdt499 Terms & Conditions.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bdt499, please contact the Data Support Team using any of the following methods:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, via the bdt499 platform
• WhatsApp: +880-1700-000000 (plain text — not a clickable link)
• Operating Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

For matters related to responsible gaming, including setting deposit limits, activating a cooling-off period, or requesting self-exclusion, please visit the Responsible Gaming page or contact the support team directly. For general platform information, the FAQ page covers common questions about account management, deposits and withdrawals, bonuses, and game rules.