Privacy Policy

This Privacy Policy ("Policy") describes how bdik ("bdik", "we", "us", "our") collects, uses, stores, shares and protects personal information provided by or collected about users ("you", "your", "Player") of the bdik website and all associated services available at bdik.org (collectively, "the Platform"). This Policy forms part of the bdik Terms and Conditions and should be read together with those terms.

By registering an account with bdik or by continuing to use the Platform after this Policy has been published, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you must cease using the bdik Platform immediately.

bdik collects personal information through a number of channels. The categories of data we collect and their sources are described below:

bdik uses the personal information it collects for the following specific purposes:

• Account management: creating, maintaining and operating your bdik account, including processing deposits, withdrawals and bet settlements.
• Identity verification: confirming that you meet the minimum age requirement of 21 years and verifying that your payment methods are registered in your own name.
• Fraud prevention and security: detecting and investigating suspicious activity, money laundering, account takeovers, bonus abuse and other forms of fraud or cheating.
• Responsible gaming: monitoring account activity to identify patterns that may indicate problem gambling, and proactively reaching out to Players who may benefit from responsible gaming support.
• Platform improvement: analysing aggregated, pseudonymised usage data to improve game selection, page performance, mobile experience and customer support quality.
• Legal and regulatory compliance: retaining records as required by applicable laws, responding to lawful requests from competent authorities, and fulfilling anti-money laundering (AML) obligations.

bdik does not use your personal data for automated profiling that produces legal or similarly significant effects on you without your explicit consent, and bdik does not use your data for cross-platform advertising or resale to data brokers.

bdik processes your personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: processing your registration data, payment information and account activity data is necessary to perform the contract between you and bdik (i.e., to operate your account and deliver the Services you have requested).
• Legitimate interests: fraud detection, responsible gaming monitoring, platform security, and service improvement activities are conducted on the basis of bdik's legitimate interest in maintaining a safe, fair and well-functioning platform.
• Legal obligation: retention of financial records, identity verification data and transaction logs is required by applicable anti-money laundering regulations and other legal frameworks applicable to bdik's operations.
• Consent: where bdik wishes to send you optional marketing communications or to use your data for purposes beyond those listed above, we will ask for your explicit consent, which you may withdraw at any time.

bdik does not sell, rent or trade your personal data. We share personal data with third parties only to the extent strictly necessary for the following purposes:

• Payment processors: bKash, Nagad, Rocket and partner bank gateways receive the minimum payment data necessary to process your transactions. These processors are contractually bound to use your data only for payment processing and are prohibited from using it for any secondary purpose.
• Identity verification providers: regulated KYC and AML service providers may receive identity document data and facial imagery for the sole purpose of verifying your identity on behalf of bdik. These providers operate under strict data processing agreements.
• Game and platform providers: game studios such as Pragmatic Play, Evolution Gaming and Spribe receive pseudonymised session and gameplay data necessary to deliver their games to you. They do not receive your name, payment details or contact information.
• Law enforcement and regulatory authorities: bdik will disclose personal data to competent authorities where legally required to do so by a valid court order, regulatory directive or lawful government request. bdik will endeavour to notify affected Players where legally permitted to do so.

All third parties with whom bdik shares personal data are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your data for purposes beyond those for which it was shared. bdik does not transfer personal data to parties located in countries that do not provide an adequate level of data protection without implementing appropriate safeguards.

When you make a deposit or withdrawal on bdik using bKash, Nagad, Rocket or a partner bank, bdik receives confirmation of the transaction from the payment provider along with the minimum information required to match the transaction to your account — typically your registered mobile wallet number, the transaction amount and a unique transaction reference. bdik does not receive or store full bank account numbers, card numbers, CVV codes or online banking passwords.

All financial transaction records associated with your bdik account are retained for a minimum period required by applicable financial regulations. These records are stored in encrypted format and access is restricted to authorised bdik personnel and, where legally required, to competent regulatory or law enforcement authorities.

bdik uses cookies and similar tracking technologies on the bdik Platform to deliver core functionality, improve user experience, and detect fraud. The types of cookies bdik uses are:

• Essential cookies: strictly necessary for the bdik Platform to function. These include session cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Analytics cookies: pseudonymised cookies that help bdik understand how players navigate the Platform, which pages are most visited, and where users encounter difficulties. This data is used exclusively to improve the Platform experience and is not shared with advertising networks.
• Fraud detection cookies: device fingerprinting and behavioural analytics cookies used to identify suspicious account activity, bot traffic and coordinated abuse patterns. These are an essential part of bdik's security infrastructure and protect all Platform users.

You may manage or delete non-essential cookies through your mobile browser settings. Please note that disabling certain cookies may affect the functionality of the bdik Platform, including your ability to remain logged in during a session.

bdik retains your personal data only for as long as is necessary for the purpose for which it was collected, or for as long as bdik is required to retain it by applicable law or regulation. The following general retention periods apply: account registration data and KYC documents are retained for the duration of your account plus a minimum of 5 years following account closure to satisfy AML record-keeping obligations; financial transaction records are retained for a minimum of 5 years from the date of the transaction; device and technical data logs are retained for up to 12 months for fraud investigation purposes; and analytics data is retained in pseudonymised or aggregated form for up to 24 months.

When personal data is no longer required and no legal obligation to retain it exists, bdik securely destroys or permanently anonymises it using industry-standard data destruction procedures. Anonymised data — data from which all identifying information has been irreversibly removed — may be retained for longer periods for statistical and platform improvement purposes.

As a bdik Player, you have the following rights in relation to the personal data that bdik holds about you. To exercise any of these rights, contact bdik support at [email protected] with a description of your request. bdik will respond within 30 days.

bdik will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive, in which case bdik may charge a reasonable administrative fee or decline to act on the request. bdik may request proof of identity before fulfilling a data access or deletion request to protect against unauthorised requests.

The bdik Platform is strictly for adults aged 21 years and above. bdik does not knowingly collect personal data from individuals under the age of 21. If bdik discovers that it has inadvertently collected personal data from a person under 21, that data will be permanently deleted and the associated account closed without delay. Parents and guardians who believe a minor may have registered on bdik are encouraged to contact bdik support at [email protected] immediately.

bdik implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. Our security measures include: 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest (including identity documents and payment identifiers); role-based access controls that restrict staff access to personal data to those with a legitimate operational need; multi-factor authentication for all bdik internal systems; regular security audits and penetration testing by qualified third-party security firms; and real-time intrusion detection and anomaly monitoring systems.

While bdik takes all reasonable steps to protect your personal data, no security system is impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bdik will notify affected Players as soon as reasonably practicable and will take immediate steps to contain and remediate the breach.

The bdik Platform may reference or display the names of third-party services including game providers, payment processors and technology partners. bdik is not responsible for the privacy practices of any third-party service. Where you interact directly with a third-party payment provider (such as bKash or Nagad) to initiate a transaction, that interaction is governed by the third party's own privacy policy. bdik encourages you to review the privacy policies of any third-party services you use in connection with your bdik account.

bdik reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law or Platform features. When material changes are made, bdik will notify registered Players by posting a prominent notice on the bdik Platform. The revised Policy will take effect immediately upon publication unless a later effective date is specified.

Your continued use of the bdik Platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised Policy. The date shown at the top of this Policy indicates when it was last updated. We recommend checking this page periodically to stay informed about how bdik protects your personal information.

For any questions about this Privacy Policy, to exercise your data rights, or to report a potential data protection concern, please contact the bdik support team. bdik will acknowledge all data-related enquiries within 5 business days and provide a full response within 30 days of receipt.

Email: [email protected]

Please include your registered mobile number and a brief description of your request in your message to help us respond promptly and accurately.