bdik Privacy Policy

bdik is committed to protecting the privacy and personal data of every member who registers an account and uses our platform. We understand that your personal information is sensitive and that you place trust in us when you share it during registration, payment processing, or identity verification. This Privacy Policy sets out our obligations to you and your rights in respect of your personal data.

This Privacy Policy applies to all personal data collected by bdik in connection with the operation of the bdik website at bdik.io, including all subdomains, mobile-optimised versions, and any associated account management interfaces. It applies to all current and former members, as well as to any visitor who browses the platform without registering.

This policy should be read together with the bdik Terms & Conditions, which form a separate but complementary agreement governing your use of the platform. In the event of any conflict between the two documents specifically in relation to data handling, the Privacy Policy prevails.

bdik operates its services primarily for members resident in Bangladesh, denominating all account balances and transactions in Bangladeshi Taka (BDT). The data practices described in this policy are tailored to reflect the Bangladesh market context and the payment methods commonly used by Bangladeshi members, including bKash, Nagad, Rocket, and Upay.

bdik collects personal data in several categories depending on the nature of your interaction with the platform. The following table summarises the main categories of personal data that bdik may collect and hold about you:

bdik collects only the minimum personal data necessary for the stated purposes. We do not collect data that is excessive in relation to the purposes for which it is processed.

bdik collects personal data through the following channels and mechanisms:

• Direct submission: Data you actively provide during account registration, KYC document upload, deposit or withdrawal requests, contact form submissions, and live chat conversations with our support team.
• Automated technical collection: Data collected automatically when you access the bdik website, including IP address, device identifiers, browser data, and session behaviour data collected via server logs and first-party analytics tools.
• Payment processors: Transaction reference data shared by bdik's authorised payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners) when processing deposits and withdrawals on your behalf.
• Cookies and similar technologies: Session data, preference data, and analytics data collected via cookies and similar tracking technologies as described in Section 7 of this policy.
• Third-party identity verification services: Where required for enhanced KYC, bdik may use authorised third-party identity verification providers to cross-check document authenticity. These providers share only a verification outcome (pass/fail) with bdik, not the full document content.
• Game providers: Game session metadata shared by bdik's authorised game suppliers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) for the purposes of game history records, dispute resolution, and responsible gaming monitoring.

bdik uses your personal data for the following specific purposes. We will not use your data for any purpose that is incompatible with those listed below without first seeking your consent or being required to do so by applicable law:

• Account creation and management: To create, maintain, and administer your bdik account, verify your identity, and manage your account settings and preferences.
• Payment processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card), verify ownership of payment methods, and maintain accurate transaction records in BDT.
• Legal and regulatory compliance: To comply with applicable legal obligations including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and age verification duties. bdik may be required to share data with competent authorities in response to lawful requests.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, money laundering, and other forms of prohibited conduct that may affect the integrity of the bdik platform.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour, apply deposit limits or self-exclusion restrictions requested by the member, and fulfil bdik's responsible gaming obligations.
• Customer support: To respond to enquiries, resolve disputes, process complaints, and provide assistance via live chat and email.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the functionality, performance, and content of the bdik platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email, where you have provided consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].

bdik processes your personal data on the following legal bases depending on the specific purpose of the processing:

• Contractual necessity: Processing required to perform our contractual obligations to you under the bdik Terms & Conditions, including account administration, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations, KYC age and identity verification duties, and responses to lawful regulatory requests.
• Legitimate interests: Processing conducted on the basis of bdik's legitimate interests in operating a secure, fair, and commercially viable online gaming platform — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing conducted solely on the basis of your freely given, specific, and informed consent — most notably in respect of marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time with immediate effect on future processing.

bdik does not sell, rent, or commercially transfer your personal data to any third-party organisation. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These partners receive only the data required to process your specific transaction (e.g., account reference, transaction amount in BDT). They are contractually prohibited from using your data for any other purpose.
• Identity verification providers: Authorised third-party KYC and document verification providers engaged by bdik to assist in confirming member identity and age. These providers are engaged under data processing agreements that restrict their use of your data to the verification purpose only.
• Game content suppliers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game providers receive session metadata necessary to deliver the game and maintain game history records. They do not receive your full personal profile.
• Legal and regulatory authorities: bdik may share personal data with competent legal, regulatory, or law enforcement authorities where required by applicable law, court order, or regulatory direction. In such cases, bdik will share only the minimum data required to satisfy the lawful request.
• Professional advisers: bdik's legal counsel, auditors, and compliance advisers may access personal data on a strictly need-to-know basis under binding confidentiality obligations when advising bdik on its legal and operational obligations.

bdik uses cookies and similar first-party tracking technologies to operate the platform effectively, maintain your session state, remember your preferences, and collect aggregated analytics data that helps us improve the platform for all members. The following types of cookies are used on the bdik platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your bdik account during a browsing session. These cookies cannot be disabled without preventing the platform from functioning correctly.
• Functional cookies: Used to remember your preferences, such as your display language (English) and other account interface settings, so you do not have to re-enter them on each visit.
• Analytics cookies: First-party analytics cookies that collect anonymised data about how members navigate the bdik platform — including which pages are visited most frequently and where members exit the site. This data is used in aggregate form only and does not identify individual members.
• Security cookies: Used to detect and prevent fraudulent activity, including cookies that help bdik identify unusual login patterns or suspicious account behaviour that may indicate unauthorised access.

bdik does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You can manage cookies through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the bdik platform, including your account login.

bdik retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal and regulatory obligations. The following retention principles apply:

• Active accounts: Personal data associated with an active bdik account is retained for the duration of the account's existence on the platform.
• Closed accounts: Following account closure, bdik retains core identity and transaction data for a minimum period of five (5) years to comply with AML record-keeping obligations. After this period, data is securely deleted or anonymised.
• KYC verification documents: Identity documents submitted for KYC purposes are retained for a minimum of five (5) years following account closure in accordance with applicable regulatory requirements. Physical document copies (if any) are destroyed securely.
• Support communications: Live chat transcripts and email correspondence with bdik's support team are retained for a period of three (3) years for dispute resolution and service quality review purposes.
• Marketing consent records: Records of your marketing consent (or withdrawal thereof) are retained for the lifetime of your account plus five (5) years to demonstrate compliance with consent obligations.
• Anonymised analytics data: Aggregated, anonymised usage data from which you cannot be identified may be retained indefinitely for platform analytics and improvement purposes.

Where retention beyond the periods specified above is required by a specific legal obligation, court order, or regulatory direction, bdik will retain the data for the period required and will notify you where practicable.

bdik implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and bdik's servers is protected by industry-standard SSL/TLS encryption. The padlock icon in your browser confirms that your connection to bdik.io is secure at all times.
• Encrypted data storage: Personal data and payment records held on bdik's servers are stored in encrypted form. Encryption keys are managed separately from the encrypted data and are accessible only to authorised bdik technical personnel.
• Access controls: Access to systems containing member personal data is restricted to authorised bdik staff who require that access to perform their specific job functions. All access is logged and subject to regular review.
• Intrusion detection and monitoring: bdik's technical infrastructure is subject to continuous security monitoring and intrusion detection to identify and respond to potential security incidents promptly.
• Staff training: All bdik staff who handle personal data receive regular training on data protection obligations and bdik's internal data handling procedures.
• Incident response: In the event of a personal data breach that poses a risk to member rights and freedoms, bdik will notify affected members without undue delay and take immediate steps to contain and remediate the breach.

As a bdik member whose personal data is processed by bdik, you have the following rights in respect of your personal data. To exercise any of these rights, please contact bdik at [email protected] with the subject line "Data Rights Request" and we will respond within a reasonable timeframe:

• Right of access: You have the right to request a copy of the personal data that bdik holds about you and to receive information about how that data is processed.
• Right to rectification: You have the right to request correction of any personal data that bdik holds about you that is inaccurate or incomplete.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and bdik has no overriding legitimate grounds to continue. This right is subject to bdik's legal retention obligations described in Section 8.
• Right to restriction of processing: You have the right to request that bdik restricts the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to bdik in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to object: You have the right to object to the processing of your personal data where bdik relies on legitimate interests as the legal basis for processing. bdik will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect processing carried out before the withdrawal.

The bdik platform is strictly restricted to individuals who are 21 years of age or older. bdik does not knowingly collect, process, or store personal data relating to any person under the age of 21. The platform's registration and KYC processes are designed specifically to prevent underage individuals from creating accounts.

If bdik becomes aware that personal data has been collected from an individual under the age of 21, that account will be closed immediately, any balance will be handled in accordance with bdik's underage gambling procedures set out in the Terms & Conditions, and the data relating to that individual will be securely deleted in accordance with applicable legal requirements.

Adults who share devices with minors are responsible for ensuring that minors do not gain access to the bdik platform or to the account holder's bdik login credentials. If you believe that a minor has accessed the bdik platform using your account, please contact [email protected] immediately.

The bdik platform does not contain links to external third-party websites in its standard navigation or content areas. However, if you access any third-party website through any means in connection with your use of the internet, please be aware that those third-party sites have their own privacy policies which are entirely independent of this Privacy Policy. bdik accepts no responsibility or liability for the privacy practices of any third-party website or service. We encourage you to review the privacy policy of any website you visit before providing your personal data to that site.

Game content supplied by third-party game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) is delivered within the bdik platform environment. While these providers may process limited session data as described in Section 6, they do so under data processing agreements with bdik and are not independent third-party websites for the purpose of this section.

bdik reserves the right to amend, update, or replace this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, bdik's operational practices, or the range of services offered on the platform. The following process applies to any material change to this Privacy Policy:

• Advance notice: bdik will notify all registered members of any material change to this Privacy Policy by email to their registered address at least fourteen (14) days before the amended policy takes effect.
• Publication: The updated Privacy Policy will be published on this page at bdik.io/privacy-policy with the effective date clearly displayed at the top of the document.
• Version history: The date of the most recent update is displayed in the "Last updated" indicator in the table of contents sidebar. You can request a summary of changes from [email protected].
• Continued use: Your continued use of the bdik platform after the effective date of an amended Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to a material change, you may close your account before the change takes effect by contacting [email protected].

Non-material changes — such as typographical corrections, clarifications of existing language, or formatting updates that do not alter the substance of the policy — may be made without prior notice, although the "Last updated" date will always be revised to reflect any modification.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bdik handles your personal data, please contact the bdik Data Support team through the following channel:

• Email: Direct all privacy and data rights enquiries to [email protected] with the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• Response time: bdik aims to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within fourteen (14) business days of receipt, measured in Bangladesh Standard Time (BST, UTC+6).
• Live chat: General privacy questions may also be raised via the live chat facility available within your logged-in bdik account. Complex data rights requests should be submitted in writing via email to ensure a complete and accurate response.

Disclaimer: This Privacy Policy is effective as of 1 January 2026 and supersedes all previous versions of the bdik Privacy Policy. bdik is an entertainment platform. By registering an account and using the bdik platform, you confirm that you are 21 years of age or older and that you have read, understood, and accepted this Privacy Policy in full.