bdtop1 Privacy Policy

1. Introduction

bdtop1 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://bdtop1.app. We are committed to protecting the privacy and personal data of every individual who visits or registers on our platform. This Privacy Policy explains in clear, plain language how we collect, use, store, share, and safeguard personal data in connection with our Services.

This policy applies to all players registered on bdtop1, visitors to the platform who have not yet registered, and any individual who contacts our support team. By accessing bdtop1 or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

Where this policy refers to "personal data", we mean any information that identifies you or that could reasonably be used to identify you as an individual, whether alone or in combination with other information we hold.

2. Personal Data We Collect

bdtop1 collects personal data through several channels: directly from you when you register and use the platform, automatically through technical systems as you browse, and occasionally from third-party verification partners. The categories of data we collect are described below.

2.1 Registration and Account Data

When you create a bdtop1 account, we collect the following information:

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address, including city, district, and postcode.
• Email address and, where provided, a contact phone number.
• Username and a hashed version of your chosen password — we do not store passwords in plain text.
• The mobile financial service account number (bKash, Nagad, Rocket, or Upay) linked to your bdtop1 account for deposit and withdrawal purposes.

2.2 Identity Verification (KYC) Data

Before processing your first withdrawal, bdtop1 requires you to complete a Know Your Customer (KYC) verification. During this process we may collect:

• A copy of a government-issued photo identification document (National ID card, passport, or driving licence).
• A recent proof of address document (utility bill, bank statement, or similar) dated within the past 90 days.
• A selfie or live photo taken at the time of verification.

KYC documents are handled with the highest level of confidentiality and are used solely for age and identity verification purposes.

2.3 Transaction and Financial Data

We maintain a record of all financial transactions conducted through your account, including deposit amounts and timestamps, withdrawal requests and their processing status, bonus credits and wagering activity, and any refunds or reversals. We do not store complete payment credentials — your mobile wallet PIN or bank authentication details are never transmitted to or held by bdtop1.

2.4 Technical and Usage Data

When you access the platform, our servers automatically record certain technical data, including:

• IP address and approximate geographic location derived from it.
• Device type, operating system version, and browser or app version.
• Pages visited, features accessed, time spent in session, and click-path data.
• Game session logs including game title, stake, outcome, and duration.
• Referral source (the URL or channel through which you arrived at bdtop1).

2.5 Communications Data

If you contact bdtop1's support team via email or live chat, we retain a record of those communications, including the content of messages and any attachments you send. This record allows us to provide consistent, informed support and to resolve disputes accurately.

3. How We Use Your Personal Data

bdtop1 processes personal data only for the purposes listed below. We do not use your data for any purpose that is incompatible with these stated intentions without first obtaining your consent or as otherwise permitted by law.

4. Cookies and Tracking Technologies

bdtop1 uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of specific platform features.

5. How We Share Your Data

bdtop1 does not sell your personal data. We share data with third parties only where it is strictly necessary to deliver the Services or to comply with legal obligations. The categories of recipients are as follows:

5.1 Payment Service Providers

When you make a deposit or request a withdrawal, we share the minimum necessary transaction data with your chosen mobile financial service provider (bKash, Nagad, Rocket, or Upay) to facilitate that transaction. These providers operate under their own privacy policies and are bound by applicable financial services regulations.

5.2 Identity Verification Partners

To fulfil our KYC obligations, we may engage accredited third-party identity verification services. These partners receive only the data necessary for verification — typically your ID document image and selfie — and are contractually prohibited from using that data for any other purpose.

5.3 Game Content Providers

Game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive anonymised or pseudonymised session data (game ID, stake, outcome, session duration) to support game integrity monitoring and RNG certification audits. No personally identifying information is shared with game studios.

5.4 Legal and Regulatory Authorities

bdtop1 will disclose personal data to competent authorities — including law enforcement agencies — where required to do so by applicable law, court order, or legitimate regulatory investigation. We will notify you of such disclosure where legally permitted to do so.

5.5 Corporate Transactions

In the event of a merger, acquisition, or restructuring of the bdtop1 business, your personal data may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, the acquiring entity will be bound by the same data protection commitments described in this policy.

6. Data Retention

bdtop1 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The general retention periods we apply are as follows:

• Active account data: Retained for the lifetime of the account and for a period of five years following account closure, to meet anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of verification, in line with standard financial compliance obligations.
• Transaction records: Retained for five years from the date of the transaction.
• Support communications: Retained for two years from the date of last contact, unless the communication relates to an ongoing dispute.
• Technical / server logs: Retained for up to 12 months and then purged or anonymised.
• Marketing consent records: Retained until you withdraw consent and for a further 12 months thereafter as evidence of your prior consent.

Once a retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

7. Your Privacy Rights

As a data subject, you hold the following rights with respect to the personal data bdtop1 processes about you. To exercise any of these rights, contact us at [email protected]. We will respond to all valid requests within 30 days.

8. Data Security

bdtop1 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, and unlawful destruction. Our technical and organisational measures include:

• TLS 1.3 encryption for all data transmitted between your device and our servers.
• AES-256 encryption for sensitive data fields stored in our databases, including KYC documents and financial records.
• Hashed passwords using bcrypt — your password is never stored or transmitted in plain text.
• Role-based access controls (RBAC) ensuring that only authorised personnel can access personal data, and only to the extent necessary for their role.
• Regular security audits and penetration testing conducted by independent specialists.
• Intrusion detection systems monitoring for unusual access patterns in real time, aligned to Bangladesh Standard Time (UTC+6) operations.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, bdtop1 will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

9. Children and Minors

bdtop1 is strictly an adults-only platform. We do not knowingly collect, process, or retain personal data belonging to any individual under the age of 21. Our registration process includes an age declaration and is supported by KYC verification to prevent underage access.

If bdtop1 becomes aware that a registered account belongs to a person under 21, that account will be immediately suspended, any balance returned to the originating payment method, and all associated personal data deleted in accordance with our retention policy. If you believe a minor has registered on our platform, please report it to [email protected] immediately.

10. Third-Party Services

The bdtop1 platform integrates game content provided by third-party studios (such as Pragmatic Play, Evolution Gaming, Spribe, and others). When you launch a game hosted by one of these studios, your session data may be processed within the studio's own infrastructure in accordance with their respective privacy policies. bdtop1 is not responsible for the data practices of these third-party providers, though we select partners who meet recognised data security standards.

Payment services (bKash, Nagad, Rocket, Upay) are independent third parties and are subject to their own terms of service and privacy policies. We encourage you to review those policies before transacting.

11. Changes to This Policy

bdtop1 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the Services we offer. The effective date displayed at the top of this document will be updated whenever a material change is made.

Where we make a significant change to how we process your personal data, we will provide notice via a prominent banner on the platform or by email to the address registered on your account, giving you a reasonable opportunity to review the changes before they take effect. Continued use of the platform after the effective date of any update constitutes acceptance of the revised policy.

12. Contact and Data Enquiries

For all privacy-related queries — including data access requests, rectification requests, erasure requests, or complaints about how we handle your personal data — please contact us using the details below. All correspondence should be in English to ensure prompt handling by our team.