bdqk Privacy Policy — How We Collect, Use, and Protect Your Personal Data
The bdqk Privacy Policy explains in plain, formal English what personal data we collect from players across Bangladesh, the purposes for which that data is processed, how it is stored and secured, and the rights you hold over your own information. Your privacy is a core commitment at bdqk, not an afterthought.
Six Core Principles Governing Data at bdqk
These principles summarise how bdqk approaches the personal data of all players. The full legal text follows in the sections below and takes precedence over these summaries.
Minimal Data Collection
bdqk collects only the personal data that is genuinely necessary to provide the platform's services, process payments via bKash, Nagad, and other supported methods, and comply with applicable legal obligations. We do not collect data speculatively or for undefined future purposes.
Bank-Grade Encryption
All personal data transmitted between your device and the bdqk platform is protected by 256-bit SSL encryption — the same standard used by major Bangladeshi financial institutions including Dutch-Bangla Bank and BRAC Bank. Data at rest is stored in encrypted form on secured infrastructure.
No Data Sales
bdqk does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data is shared only with service providers who are contractually bound to process it solely on bdqk's behalf and strictly for the purposes described in this Privacy Policy.
Your Rights Over Your Data
Every bdqk user has the right to access, correct, and request deletion of their personal data. You may also object to certain processing activities or request a portable copy of the data we hold about you. Requests are handled by the bdqk support team within a reasonable timeframe.
Defined Retention Periods
bdqk retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Account data is retained for a minimum of five years following account closure to satisfy anti-money laundering record-keeping obligations under applicable Bangladeshi law.
Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, bdqk will notify affected users without undue delay and will take immediate steps to contain and remediate the breach. We maintain an incident response procedure specifically for data security events.
1 Definitions
The following definitions apply throughout this Privacy Policy:
- "bdqk", "we", "us", or "our" refers to the bdqk platform and its operating entity, accessible at https://bdqk.io.
- "Platform" means the bdqk website, mobile interface, games lobby, sportsbook, live casino, and all associated services.
- "User", "you", or "your" refers to any individual who accesses, registers on, or otherwise uses the bdqk Platform.
- "Personal Data" means any information relating to an identified or identifiable natural person, including name, contact details, payment information, device identifiers, and behavioural data.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
- "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, bdqk.
- "Data Processor" means a third party that processes Personal Data on behalf of bdqk, under contractual instruction.
- "KYC" means Know Your Customer — the identity verification process through which bdqk confirms a user's identity and age.
- "BST" means Bangladesh Standard Time, UTC+6.
2 Data Controller
bdqk is the Data Controller for all Personal Data processed in connection with the Platform. As Data Controller, bdqk determines why and how your Personal Data is processed, and is responsible for ensuring that processing is carried out in accordance with this Privacy Policy and applicable data protection law.
If you have any questions about how your Personal Data is handled, or if you wish to exercise any of the rights described in Section 11, you may contact the bdqk Data Protection team using the contact details set out in Section 15 of this Policy.
3 Data We Collect
3.1 Data You Provide Directly
When you register an Account, deposit funds, request a withdrawal, contact support, or participate in a promotion on bdqk, you provide us with Personal Data. This data typically includes:
- Full legal name and date of birth
- Email address and mobile phone number
- Residential address (city, district, and postcode within Bangladesh)
- National Identity Card (NID) number or passport number (for KYC verification)
- Payment method details, including bKash, Nagad, Rocket, and Upay wallet numbers, and bank account information where applicable
- Username and encrypted password
- Any correspondence sent to the bdqk support team
3.2 Data Collected Automatically
When you access the bdqk Platform, certain technical and behavioural data is collected automatically via cookies and server logs:
| Data Category | Examples | Purpose |
|---|---|---|
| Device & Browser Data | Device type, OS, browser version, screen resolution | Platform optimisation, fraud detection |
| Network Data | IP address, ISP, approximate location (city-level) | Geo-restriction compliance, security monitoring |
| Session Data | Login timestamps, session duration, pages visited | Account security, responsible gaming monitoring |
| Betting & Gaming Activity | Bets placed, games played, wager amounts, win/loss history | Service delivery, responsible gaming, dispute resolution |
| Transaction Data | Deposit/withdrawal amounts, timestamps, payment method used | Payment processing, AML compliance, record-keeping |
3.3 Data From Third Parties
In limited circumstances, bdqk may receive Personal Data about you from third parties. This includes identity verification data from KYC service providers, fraud risk scores from payment processors, and, where applicable, information from publicly available sources used to satisfy anti-money laundering obligations.
4 How We Use Your Data
bdqk processes your Personal Data for the following specific purposes:
- Account Management: Creating, maintaining, and securing your bdqk Account, including authentication and password recovery.
- Service Delivery: Processing bets, resolving sports betting markets, delivering casino and slot game sessions, and crediting winnings to your Account balance.
- Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, Mastercard, and other supported methods.
- Identity Verification (KYC): Confirming your age and identity in compliance with responsible gaming obligations and anti-money laundering requirements.
- Fraud Prevention & Security: Detecting and preventing fraudulent activity, account takeovers, collusion, and money laundering on the Platform.
- Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and applying account-level protections such as deposit limits, cooling-off periods, and self-exclusion where requested or required.
- Customer Support: Responding to your enquiries, resolving disputes, and processing complaints submitted to the bdqk support team.
- Legal Compliance: Fulfilling obligations under applicable law, including responding to lawful requests from regulatory authorities.
- Platform Improvement: Analysing aggregated, anonymised usage data to improve the functionality, layout, and performance of the bdqk Platform.
- Promotional Communications: Sending you information about bonuses, seasonal promotions (such as Eid or Pohela Boishakh offers), and personalised offers — only where you have provided valid consent.
5 Legal Bases for Processing
bdqk relies on one or more of the following legal bases when processing your Personal Data:
- Contractual Necessity: Processing is necessary to perform the contract between you and bdqk — specifically, to operate your Account, process transactions, and deliver the betting and gaming services you have requested.
- Legal Obligation: Processing is necessary for bdqk to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and record-keeping obligations.
- Legitimate Interests: bdqk processes certain data on the basis of its legitimate interests in preventing fraud, ensuring platform security, and improving the user experience, where those interests are not overridden by your rights and interests.
- Consent: Where bdqk relies on your consent — for example, to send marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
6 Cookies & Tracking Technologies
6.1 What Are Cookies?
Cookies are small text files placed on your device when you visit the bdqk Platform. They allow the Platform to recognise your device across sessions, remember your preferences, and collect usage data for the purposes described in this Policy.
6.2 Types of Cookies Used by bdqk
- Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during an active game session. They cannot be disabled without impairing Platform functionality.
- Performance & Analytics Cookies: Collect anonymised data about how users interact with the Platform (e.g., which pages are visited most frequently, average session duration). This helps bdqk identify usability issues and optimise the experience.
- Functional Cookies: Remember your preferences such as language selection and display settings so you do not need to reconfigure them on each visit.
- Security Cookies: Used to detect and prevent fraudulent activity, including anomalous login attempts and suspicious betting patterns.
6.3 Managing Cookies
You may control or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain Platform features. Details of how to manage cookies are available in the help documentation of your browser.
7 Data Sharing & Disclosure
bdqk does not sell, rent, or trade your Personal Data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
- Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners receive transaction data necessary to process your deposits and withdrawals.
- KYC & Identity Verification Providers: Third-party identity verification services receive the documents and data you submit during KYC in order to validate your identity and age on bdqk's behalf.
- Game Providers: Licensed studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Red Tiger receive the session data necessary to deliver their game content through the bdqk Platform.
- Fraud Prevention Partners: Anonymised risk signals may be shared with fraud detection partners to prevent account takeovers and financial crime across the Platform.
- Legal & Regulatory Authorities: bdqk will disclose Personal Data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or valid legal process.
- Business Transfers: In the event of a merger, acquisition, or sale of substantially all of bdqk's assets, Personal Data may be transferred to the successor entity, subject to the same privacy protections as described in this Policy.
All third-party Data Processors are bound by contractual data processing agreements requiring them to process Personal Data only on bdqk's documented instructions and to maintain appropriate security measures.
8 International Data Transfers
The bdqk Platform primarily serves users located in Bangladesh, and data processing is conducted within this context. However, certain service providers — including game studios and cloud infrastructure providers — may process data in locations outside Bangladesh. Where such transfers occur, bdqk takes appropriate steps to ensure that your Personal Data remains protected to a standard equivalent to that described in this Policy.
These steps may include entering into contractual clauses with receiving parties that impose obligations equivalent to those applicable in Bangladesh, or selecting providers operating in jurisdictions with adequate data protection frameworks.
9 Data Retention
bdqk retains your Personal Data for as long as your Account is active and for a period thereafter as required by law or legitimate business need. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | 5 years after account closure | AML record-keeping obligations |
| Transaction Records | 7 years after transaction date | Financial record-keeping and dispute resolution |
| KYC Documents | 5 years after account closure | Regulatory compliance |
| Support Correspondence | 3 years after resolution | Dispute resolution history |
| Session & Gameplay Logs | 2 years from session date | Security monitoring, responsible gaming |
| Marketing Preferences | Until consent withdrawn or account closed | Consent record-keeping |
Once the applicable retention period has elapsed, bdqk will securely delete or anonymise Personal Data in accordance with its internal data disposal procedures.
10 Security Measures
bdqk implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the bdqk Platform is encrypted in transit using industry-standard TLS protocols.
- Encrypted Data Storage: Sensitive Personal Data, including payment details and identity documents, is stored in encrypted form on secured infrastructure.
- Access Controls: Access to Personal Data within bdqk is restricted to authorised personnel on a strict need-to-know basis. All staff with access to Personal Data are bound by confidentiality obligations.
- Multi-Factor Authentication: bdqk supports optional two-factor authentication (2FA) for user Accounts to reduce the risk of unauthorised access.
- Regular Security Audits: The Platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: bdqk maintains a documented data breach response procedure, including designated responsibilities, escalation paths, and user notification protocols.
11 Your Rights Over Your Personal Data
As a bdqk user, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact the bdqk Data Protection team at [email protected] with the subject line "Data Rights Request":
- Right of Access: You may request a copy of the Personal Data that bdqk holds about you, together with information about how it is being processed.
- Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
- Right to Erasure: In certain circumstances, you may request that bdqk delete your Personal Data. This right is subject to limitations where retention is required by law (e.g., AML record-keeping).
- Right to Restriction: You may request that bdqk restrict the processing of your Personal Data while a dispute about its accuracy or the lawfulness of its processing is resolved.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a structured, machine-readable copy of the Personal Data you have provided to bdqk.
- Right to Object: You may object to processing that is based on bdqk's legitimate interests. bdqk will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
bdqk will respond to all valid data rights requests within 30 days of receipt. In complex or high-volume cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.
12 Children & Minors
The bdqk Platform is strictly intended for individuals who are 21 years of age or older. bdqk does not knowingly collect, store, or process Personal Data relating to individuals under the age of 21. If bdqk becomes aware that a user is under 21, their Account will be immediately suspended, any winnings forfeited, and all related Personal Data deleted or anonymised in accordance with Section 9 of this Policy.
If you are a parent or guardian and believe that a minor has registered on the bdqk Platform, please contact us immediately at [email protected] so that we may take appropriate action without delay.
13 Third-Party Links
The bdqk Platform may contain references to game providers or payment partners whose services operate under their own privacy frameworks. While bdqk selects partners with reputable data protection practices, this Privacy Policy applies only to the bdqk Platform itself. bdqk is not responsible for the privacy practices, content, or data handling of any third-party service provider accessed in connection with the Platform. We encourage you to review the privacy policies of any third-party services you interact with.
14 Amendments to This Privacy Policy
bdqk reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, Platform functionality, or data processing practices. When material changes are made, the revised Policy will be published on this page with an updated effective date. Where the changes are significant, bdqk will notify registered users via the contact method held on file.
Your continued use of the Platform after the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, you should cease using the Platform and may request closure of your Account in accordance with the bdqk Terms & Conditions.
15 Contact & Complaints
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by bdqk, please contact the Data Protection team using the details below:
Email: [email protected]
Subject Line: Privacy Policy Enquiry — [Your Account Username]
Support Hours: 24 hours a day, 7 days a week (BST)
Please include your full name, registered email address, and a clear description of your query or request in all correspondence. bdqk aims to acknowledge all Privacy Policy enquiries within two (2) business days.
If you are not satisfied with bdqk's response to a data-related complaint, you may have the right to escalate the matter to an appropriate supervisory or regulatory authority in your jurisdiction.
Questions About Your Data? We Are Here to Help.
The bdqk support team is available around the clock to address any privacy or data-related questions. You can also explore our FAQ for quick answers, review our Terms & Conditions, or head straight to the casino.