5bdt Privacy Policy — How We Protect Your Data

1. Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for the processing of your personal information is 5bdt, operating the website at https://5bdt.club (the "Platform", "Site", "we", "us", "our"). As the data controller, 5bdt determines the purposes and means by which your personal data is processed in connection with the provision of online casino and sports betting services to players based primarily in Bangladesh.

All privacy-related queries, data subject access requests, and requests to exercise any of the rights described in Section 8 of this policy should be directed to the 5bdt data protection contact using the details below:

5bdt is committed to processing personal data lawfully, fairly, and transparently. This policy is reviewed and updated periodically. The effective date at the top of this document indicates the version currently in force. We will notify registered players of any material changes to this policy via the email address associated with their account.

2. Information We Collect

5bdt collects personal data from you in several ways: directly when you register an account or contact support, automatically when you use the Platform, and occasionally from third-party sources such as payment processors and identity verification services. The categories of data we collect are described below.

2.1 Registration Data

When you create a player account on 5bdt, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you are aged 18 or above)
• Residential address (including district, city — Dhaka, Chittagong , Sylhet, Khulna, Rajshahi, or other Bangladeshi locality, and postcode)
• Email address (used for account communications and notifications)
• Mobile phone number registered in Bangladesh (used for account verification and payment method linking)
• Username and encrypted password
• Preferred currency (BDT / ৳ by default for all Bangladesh-based players)

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request and retain copies of the following documents:

• National Identity Card (NID) or passport (to confirm identity and age)
• Proof of residential address — utility bill, bank statement, or official government correspondence dated within three months
• Proof of payment method ownership — for example, confirmation that a bKash or Nagad mobile wallet account is registered in your name
• Source of funds documentation where deposit volumes exceed defined thresholds

2.3 Financial Transaction Data

When you make deposits or request withdrawals, we collect and retain records of:

• Payment method type (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard)
• Transaction amounts in BDT (৳)
• Transaction timestamps and reference numbers
• Account balance history and wagering activity

5bdt does not store full card numbers or mobile wallet PINs. Payment processing is handled by certified third-party payment service providers who operate under their own data security standards.

2.4 Technical and Usage Data

When you access the 5bdt Platform, our servers and analytics systems automatically collect certain technical information, including:

• IP address and approximate geolocation (country and city level)
• Browser type and version, operating system, and device type
• Pages visited, time spent on each page, and navigation paths
• Game session data including games played, bet amounts, and session duration
• Referring URL (the page from which you arrived at the 5bdt Site)
• Cookie identifiers and session tokens (see Section 6 for full details)

2.5 Communications Data

When you contact 5bdt support via live chat or email, we retain records of those communications including the content of messages, timestamps, and the resolution outcome. This data is used for quality assurance, dispute resolution, and regulatory compliance purposes.

3. Lawful Basis for Processing

5bdt processes your personal data under the following lawful bases, which apply to different categories of processing activity:

Processing Activity	Lawful Basis
Account registration and player authentication	Performance of a contract (the Agreement between you and 5bdt)
KYC identity verification and age checks	Legal obligation and legitimate interests (fraud prevention, underage gambling prevention)
Processing deposits and withdrawal requests	Performance of a contract
Fraud detection and anti-money laundering monitoring	Legal obligation and legitimate interests
Customer support communications	Performance of a contract and legitimate interests
Platform analytics and service improvement	Legitimate interests (improving player experience and platform security)
Responsible gaming monitoring and intervention	Legal obligation and legitimate interests (player protection)
Promotional communications and bonus offers	Consent (you may withdraw consent at any time via account settings or by contacting support)

Where we rely on legitimate interests as our lawful basis, we have assessed that our interests in processing your data do not override your fundamental rights and freedoms, taking into account the reasonable expectations of players using an online gambling platform.

4. How We Use Your Information

The personal data collected by 5bdt is used exclusively for the purposes set out below. We do not process your data in ways that are incompatible with the purposes for which it was originally collected.

4.1 Account Management and Service Delivery

Your registration data and financial transaction data are used to operate and maintain your player account, process deposits and withdrawals in BDT (৳), credit bonuses and free bet awards, and communicate account status updates including security alerts and transaction confirmations. Without this processing, 5bdt cannot provide the services described in the Terms & Conditions.

4.2 Identity Verification and Compliance

KYC documentation is used solely to verify your identity, confirm that you are aged 18 or above, and satisfy the Platform's anti-money laundering (AML) and fraud prevention obligations. Identity documents are stored securely and are not used for any purpose beyond compliance verification.

4.3 Responsible Gaming Monitoring

5bdt uses your gameplay data — including betting frequency, deposit patterns, session duration, and loss history — to monitor for signs of problem gambling behaviour. Where our responsible gaming systems flag a concern, a member of the support team may make contact to discuss available tools such as deposit limits, cooling-off periods, and self-exclusion. This processing is carried out in the genuine interest of player welfare and is not used for marketing purposes.

4.4 Fraud Prevention and Security

Technical data including IP addresses, device identifiers, and session activity is used by our automated fraud detection systems to identify suspicious account behaviour, prevent unauthorised access, and detect potential collusion, bonus abuse, or money laundering activity. Where a security concern is identified, the relevant account may be suspended pending investigation.

4.5 Marketing and Promotional Communications

Where you have provided explicit consent, we may use your email address and mobile number to send promotional communications about 5bdt offers, seasonal bonuses tied to events such as BPL cricket season, Eid ul-Fitr, Pohela Boishakh, and IPL fixtures, and platform updates. You may withdraw your consent to marketing communications at any time by updating your notification preferences within your account settings or by contacting the support team. Withdrawal of consent to marketing does not affect your ability to use the Platform.

4.6 Platform Analytics and Improvement

Aggregated and anonymised usage data is used to analyse how players interact with the 5bdt Platform, identify performance bottlenecks, and improve the overall user experience. Where analytics data is fully anonymised and cannot be linked back to any individual, it falls outside the scope of personal data and this Privacy Policy.

5. Data Sharing and Third Parties

5bdt does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

5.1 Payment Service Providers

To process your deposits and withdrawals, we share relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and international card networks Visa and Mastercard. These providers receive only the data necessary to execute and confirm your transaction. They are bound by their own data protection obligations and are prohibited from using your data for any purpose other than transaction processing.

5.2 Identity Verification Services

For KYC and age verification purposes, we may share identity document data with certified third-party verification providers. These providers operate under strict confidentiality agreements and are authorised only to return a verification result to 5bdt — they do not retain copies of your documents beyond the minimum period required for their own legal compliance obligations.

5.3 Game Software Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and gameplay data to facilitate game delivery, detect technical errors, and enforce their own game integrity standards. Game providers do not receive your name, address, payment method details, or other personally identifiable information.

5.4 Legal and Regulatory Disclosure

5bdt may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are required to do so by applicable law, court order, or lawful regulatory request. In such cases, we will disclose only the minimum information necessary to satisfy the legal requirement and will endeavour to notify you of the disclosure where legally permitted to do so.

5.5 Business Transfers

In the event that 5bdt undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will take reasonable steps to ensure that the acquiring entity commits to honouring the protections described in this Privacy Policy, and we will notify affected players of any material change to data controller identity.

6. Cookies and Tracking Technologies

5bdt uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse how the Site is used. This section explains the categories of cookies we use and how you can manage them.

6.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They allow the website to recognise your device on subsequent visits and to store certain information about your session or preferences. Cookies cannot execute programmes or deliver viruses to your device — they are a standard and widely used technology across all modern web services.

6.2 Categories of Cookies Used by 5bdt

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your login session, process transactions, prevent fraud, and enable core Platform functionality.	No — essential for the Platform to function
Functional	Remember your language preference, display settings, and recently played games.	Yes — disabling may reduce Platform functionality
Analytics	Collect aggregated data on page visits, session durations, and user navigation paths to improve Platform performance.	Yes — disabling does not affect Platform access
Marketing	Track which promotional content you have viewed to deliver relevant bonus offers and avoid showing you repeated messages.	Yes — requires your consent before placement

6.3 Managing Your Cookie Preferences

You can manage or delete cookies at any time through your browser settings. Most modern browsers — including Chrome, Firefox, Edge, and Safari on both desktop and mobile — allow you to view, block, or delete cookies on a per-site or global basis. Please note that disabling strictly necessary cookies will prevent you from logging in to your 5bdt account and using core Platform features. Instructions for managing cookies in your specific browser can be found in your browser's help documentation.

7. Data Retention

5bdt retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applied to different categories of data are summarised below.

Data Category	Retention Period	Reason
Account registration data	Duration of account plus 5 years after closure	AML compliance, dispute resolution, regulatory audit
KYC identity documents	Duration of account plus 5 years after closure	Legal obligation under AML and fraud prevention frameworks
Financial transaction records	7 years from transaction date	Accounting and regulatory record-keeping requirements
Customer support communications	3 years from the date of the interaction	Quality assurance and dispute resolution
Technical and usage data (logs)	12 months on a rolling basis	Security monitoring and platform analytics
Marketing consent records	Until consent is withdrawn plus 1 year	Proof of consent for regulatory purposes

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual. Where data is anonymised rather than deleted, the resulting dataset is no longer subject to this Privacy Policy as it no longer constitutes personal data.

8. Your Rights Over Your Data

As a data subject, you have a number of rights with respect to the personal data that 5bdt holds about you. These rights are described below. To exercise any of these rights, please contact the 5bdt data protection team via live chat or by emailing [email protected]. We will respond to all valid requests within 10 business days. We may need to verify your identity before processing a request.

8.1 Right of Access

You have the right to request a copy of the personal data that 5bdt holds about you, along with information about how it is being processed. This is commonly referred to as a Subject Access Request (SAR). We will provide this information in a structured, commonly used, and machine-readable format where possible.

8.2 Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your address or phone number, you may also update these directly through your account settings panel. For KYC document corrections, please contact the support team directly.

8.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other lawful basis for continued processing. Please note that this right is subject to our legal retention obligations described in Section 7. Where we are required by law to retain data for a specified period, we cannot fulfil an erasure request in respect of that data until the retention period has elapsed.

8.4 Right to Restriction of Processing

In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to processing and we are assessing whether our legitimate interests override your rights — you may request that we restrict the processing of your data. During the restriction period, we will continue to store your data but will not actively process it for operational purposes beyond storage.

8.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a portable, structured format and to request that it be transmitted directly to another data controller where technically feasible.

8.6 Right to Object

You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis. You also have the absolute right to object to processing for direct marketing purposes at any time, without needing to provide a reason. Upon receipt of a valid marketing objection, we will cease all promotional communications immediately.

8.7 Right to Withdraw Consent

Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal. To withdraw consent, update your notification preferences in your account settings or contact support via live chat.