bdrk1 Privacy Policy

bdrk1 collects personal information from you when you register an account, complete identity verification, make deposits or withdrawals, use our games or betting markets, or contact our support team. The categories of personal information we collect are described below.

bdrk1 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information unless it is directly relevant to a responsible gaming self-exclusion request (in which case only the minimum necessary data is recorded).

bdrk1 processes your personal data only for clearly defined, legitimate purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without your prior knowledge and, where required, explicit consent.

• Account Management: To create, maintain, and manage your bdrk1 player account, including verifying your identity at registration and at withdrawal.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to match transactions to the correct player account.
• Regulatory Compliance (KYC/AML): To verify your age and identity in accordance with age-restriction policies and to detect and prevent money laundering, fraud, and other financial crimes.
• Platform Operation: To deliver the sports betting, casino, and slots services you have requested, including settling bets, awarding winnings, and applying bonuses to your account.
• Customer Support: To respond to your support queries, resolve disputes, and maintain a record of communications for quality assurance and training purposes.
• Responsible Gaming: To monitor betting patterns and session behaviour for signs of problem gambling, to enforce self-exclusion and deposit limits, and to send responsible gaming alerts where appropriate.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve site performance, game selection, and the overall user experience.
• Marketing Communications: To send you promotional offers, bonus alerts, and seasonal campaign notifications relevant to your account — only where you have consented to receive such communications and only via the contact channels you have registered.

bdrk1 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between bdrk1 and you (the player), including account creation, bet settlement, payment processing, and support delivery. Without this processing, bdrk1 cannot provide its services.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including age verification, anti-money laundering (AML) obligations, and fraud prevention measures.
• Legitimate Interests: Processing is in bdrk1's legitimate interests to operate a safe, fair, and commercially viable platform — for example, security monitoring, fraud detection, responsible gaming enforcement, and platform analytics — where these interests are not overridden by your fundamental rights.
• Consent: Where processing is based on your consent — particularly for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bdrk1 does not rely solely on consent for processing activities that are necessary for the performance of our services, as this would impair our ability to provide a functional, secure, and compliant platform.

bdrk1 does not sell your personal data to any third party. We share your personal information only with the categories of recipients listed below, and only to the minimum extent necessary for the stated purpose.

• Payment Service Providers: bKash, Nagad, Rocket, and Upay receive the transaction reference data required to process your deposits and withdrawals. Each provider operates under its own privacy policy and data protection standards. bdrk1 does not transmit your NID number or KYC documents to payment providers.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player token (not your real name, mobile number, or NID) to enable game session management. Your full identity is never disclosed to game studios.
• Analytics & Technical Partners: Aggregated, anonymised usage data may be shared with platform analytics providers to support site performance monitoring. No personally identifiable information is included in these data transfers.
• Fraud Prevention & Security Services: We may share account and device data with specialist fraud detection and cybersecurity partners for the purpose of detecting and preventing account compromise, bot activity, and financial fraud.
• Law Enforcement & Regulatory Authorities: bdrk1 will disclose personal data to competent authorities in Bangladesh where required to do so by valid legal process, court order, or regulatory directive. We will notify affected players of such disclosures where legally permitted to do so.

bdrk1.net uses cookies and similar browser-based technologies to operate the platform, maintain session state, and measure site performance. We do not use cross-site advertising cookies or behavioural profiling trackers. The cookies deployed on bdrk1.net fall into the following categories:

You can manage or delete cookies at any time through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your bdrk1 account. Disabling functional or analytics cookies will not affect your ability to place bets or play games but may reduce the personalisation of your experience.

bdrk1 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the lifetime of the account and for a period of 5 years following account closure, to satisfy anti-money laundering record-keeping obligations and to resolve any post-closure disputes.
• Financial Transaction Records: Deposit and withdrawal records are retained for 7 years from the date of the transaction in accordance with financial compliance requirements applicable to payment service operations.
• KYC Documents: Identity and proof-of-address documents are retained for 5 years following account closure. After this period, documents are securely deleted from all bdrk1 systems.
• Support Communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical & Log Data: Server logs, IP address records, and device fingerprint data are retained for 90 days for security monitoring purposes, after which they are purged or irreversibly anonymised.
• Marketing Consent Records: Records of your consent to (or withdrawal from) marketing communications are retained for 3 years to demonstrate compliance with consent obligations.

When the applicable retention period expires, bdrk1 securely deletes or anonymises the relevant personal data such that it can no longer be attributed to an identified or identifiable individual. Data that has been irreversibly anonymised is no longer considered personal data and may be retained indefinitely for aggregate statistical purposes.

As a registered player on bdrk1, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Request". bdrk1 will respond within 30 calendar days.

• Right of Access: You may request a copy of all personal data that bdrk1 holds about you, including your account data, transaction history, KYC records, and support communications. We will provide this information in a portable, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Identity corrections require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing. This right is subject to overriding legal retention obligations (e.g., AML record-keeping).
• Right to Restrict Processing: You may request that bdrk1 restrict the processing of your personal data while a dispute about its accuracy or lawfulness is being resolved, or pending the outcome of an objection to processing.
• Right to Data Portability: You may request that bdrk1 transmit your personal data to you or to another service provider in a structured, machine-readable format (e.g., JSON or CSV).
• Right to Object: You may object to processing that is based on legitimate interests or carried out for direct marketing purposes. bdrk1 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

bdrk1 employs a layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• Encryption in Transit: All data transmitted between your browser or mobile device and bdrk1's servers is encrypted using TLS 1.3 with 256-bit AES encryption. bdrk1.net enforces HTTPS on all pages with HTTP Strict Transport Security (HSTS) headers.
• Encryption at Rest: Sensitive personal data — including KYC documents, NID numbers, and financial records — is encrypted at rest using AES-256 on dedicated, access-controlled storage systems.
• Access Controls: Access to personal data is granted on a strict need-to-know basis. Internal staff are assigned role-based permissions; access to KYC documents is limited to compliance officers. All access events are logged and audited.
• Intrusion Detection: bdrk1's infrastructure is monitored continuously by automated intrusion detection systems (IDS) and a 24/7 security operations function that investigates anomalous access patterns in real time.
• Two-Factor Authentication (2FA): SMS OTP two-factor authentication is available to all players and is strongly recommended. Staff accounts with access to player data are required to use 2FA at all times.
• Regular Security Testing: bdrk1 conducts periodic penetration tests and vulnerability assessments of its platform infrastructure and web application layer to identify and remediate security weaknesses before they can be exploited.

The bdrk1 platform integrates with a number of third-party service providers whose products and services are essential to platform operation. Each of these providers processes a limited subset of your personal data under the terms of a data processing agreement with bdrk1 and their own applicable privacy policies.

bdrk1 requires all third-party data processors to implement appropriate technical and organisational security measures, to process personal data only on bdrk1's documented instructions, and to notify bdrk1 promptly in the event of any security incident affecting our players' data. bdrk1 is not responsible for the independent data collection practices of third-party websites that may be linked from our platform (if any), but note that bdrk1.net does not contain outbound links to external sites under normal operation.

• Mobile Financial Services (MFS): bKash, Nagad, Rocket, and Upay process payment transaction data to settle deposits and withdrawals. Each provider is regulated under Bangladesh Bank's guidelines for Mobile Financial Services.
• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive pseudonymous session tokens to manage game sessions. These providers are certified by independent testing laboratories (e.g., eCOGRA, BMM Testlabs) and operate under international gaming licences.
• Analytics Infrastructure: Server-side analytics tools collect anonymised, aggregated performance data (page-load times, error rates, feature usage). No personally identifiable information is included in analytics data transmitted to external systems.
• Live Chat & Support Platform: bdrk1's customer support system stores live chat transcripts and support ticket content to enable case management and quality review. Support data is stored within access-controlled environments and is subject to the same retention periods as communications data described in Section 6.

bdrk1 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. When we make material changes to this Policy, we will notify registered players via SMS or email at least 7 days before the updated Policy takes effect, where practicable. The "Effective Date" shown at the top of this page will be updated to reflect the date the revised Policy comes into force.

Continued use of the bdrk1 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any material change, you may close your account in accordance with the account closure procedure described in our Terms & Conditions and request deletion of your personal data under Section 7 of this Policy.

Minor updates — such as clarifications of existing practices, corrections of typographical errors, or updates to contact details — may be made at any time without prior notice and will be reflected immediately on this page.

• Email: [email protected] — subject line: "Privacy Enquiry"
• WhatsApp / Phone: +880 1700 000000 (available 24/7)
• Live Chat: Available 24 hours a day, 7 days a week via the bdrk1 platform support widget
• Response Time: Formal privacy requests (access, erasure, portability) are processed within 30 calendar days of identity verification. General enquiries are answered within 5 business days.

This Privacy Policy is written in English. The English text is the governing version and takes precedence over any translation, summary, or paraphrase for all interpretive and legal purposes. bdrk1 is committed to maintaining the highest standards of transparency, security, and respect for the privacy of every player across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all of Bangladesh.