Goldbdt Privacy Policy – Your data is our responsibility

1. Introduction

At goldbdt, user privacy is our highest priority in running the platform. This Privacy Policy explains how goldbdt collects your data, how it is used, and the measures taken to keep it secure.

Goldbdt is an internationally licensed platform and complies with international data protection laws and standards. Our data processing practices are aligned with the principles of the GDPR (General Data Protection Regulation).

This policy applies solely to goldbdt.app. Third-party websites and services are governed by their own respective policies.

2. What Data Is Collected

Goldbdt collects two types of data – information you provide directly and data generated automatically as you use the platform.

What you provide directly:

• Name, date of birth, and mobile number provided at registration.
• Photos of identity documents or passports submitted for KYC verification.
• Mobile banking or bank account details provided at the time of payment.
• Conversation records of what you type in the support chat.
• Any additional information you choose to provide voluntarily.

Automatically collected data:

• IP address and device type (mobile, desktop).
• Browser type and operating system information.
• A log of which pages you visited on the platform and for how long.
• Betting and gaming history and transaction records.
• Session tokens & cookies (see Section 7 for details).

3. Why We Collect Your Information

Goldbdt only collects information for necessary purposes. No unnecessary data is gathered.

• Account Management: To identify you and ensure secure login.
• KYC Verification: To verify identity in compliance with international anti-money laundering regulations.
• Payment Processing: To process deposits and withdrawals accurately.
• Customer Support: To assist you faster by reviewing your previous support history.
• Fraud Prevention: To detect multiple accounts or unusual activity.
• Platform Improvement: We analyze which features are used most to improve our services.
• Legal Liability: To fulfill mandatory reporting requirements from regulatory authorities.

4. Where and How Long Your Data Is Stored

Goldbdt's data servers are housed in secure data centers with 24/7 physical and digital security measures in place. All data is stored in encrypted form.

• Account information: Retained for as long as the account remains active.
• Transaction records: Retained for up to 7 years as required by law.
• KYC documents: Securely stored after verification is complete.
• Payment details: Full transaction details are not stored on the server after a transaction is completed.
• Support chat logs: may be retained for up to 3 years after a case is resolved.

Once an account is permanently closed, personal data is deleted unless retention is required by law.

5. Who Your Data Is Shared With Important

Goldbdt never sells your personal data. Information is only shared with third parties in the limited circumstances outlined below.

• Payment Processor: Limited data is shared with bKash, Nagad, and Rocket solely to process transactions.
• Game Providers: Essential session data is transmitted during Live Casino gameplay.
• KYC Verification Partner: We work with designated and trusted providers for identity verification.
• Legal Authorities: Specific data may be disclosed in response to a valid court order or a request from a government authority.
• Audit Firm: Limited and anonymised data is used in third-party security audits.

In each of the above cases, goldbdt ensures that third parties adhere to the same standard of privacy policy.

6. Security Measures

Goldbdt uses industry-leading technology to protect user data.

• All connections are secured with TLS 1.3 and 256-bit AES encryption.
• Passwords are stored using bcrypt hashing — meaning goldbdt never has access to your actual password.
• You can enable Two-Factor Authentication (2FA) on your account for added security.
• Accounts are automatically suspended temporarily upon suspicious login attempts.
• Firewall and IDS systems are active to prevent unauthorized access to servers.
• Regular third-party penetration testing and security audits are conducted.
• Data centers are monitored 24/7 with physical security measures in place.

7. Cookies & Tracking

Goldbdt uses cookies to ensure the platform functions properly and to improve your experience. Cookies are small files stored in your browser.

Types of Cookies:

• Essential Cookies: Used to maintain login sessions and ensure platform security. These cannot be disabled as they are essential for the platform to function.
• Functional Cookies: Used to remember your preferences (language, theme).
• Analytical Cookies: Collects anonymous data to understand which pages are most popular.

You can manage cookies through your browser settings. However, disabling essential cookies may cause some features to stop working. goldbdt never uses third-party advertising tracking cookies.

8. Payment Data Security Special

Payment data is goldbdt's most sensitive information. Special measures are in place to protect it.

• Full bKash, Nagad, or bank account numbers are not stored on goldbdt's servers after a transaction is completed.
• Only masked details are shown during payment (e.g., 017××××××90).
• A unique transaction ID is generated for every deposit.
• All payment processing takes place through fully encrypted channels.
• Withdrawals can only be made to a registered and verified number — transfers to any other destination are not possible.

If any unusual payment activity is detected, goldbdt automatically sends an alert and suspends the transaction if necessary.

9. Your Rights

You have specific rights over your data at goldbdt. To exercise these rights, write to support@goldbdt.app.

• Right to Access: You can request to know what information goldbdt holds about you.
• Right to Rectification: You may request corrections to any inaccurate information.
• Right to Erasure: You may request deletion of your data, provided there is no legal obligation to retain it.
• Right to Restrict Processing: You may request that we stop using your data for specific purposes.
• Right to Data Portability: You may request your data in a readable, portable format.
• Right to Object: You can object to the use of your data for specific purposes.

Goldbdt will respond within 30 business days of receiving your request. Complex cases may take a little longer, but you will be informed.

10. Protection of Minors

Goldbdt strictly prohibits anyone under 18 from using the platform. Collecting personal information from minors is against goldbdt's policy.

• Age is verified during registration, and confirmed via identity documents during KYC.
• If it is found that a minor's information has been collected by mistake, it is deleted immediately.
• If parents believe their child's data may be held by us, please contact support@goldbdt.app immediately.

11. Policy Changes

Goldbdt may update this Privacy Policy from time to time. For significant changes, users will be notified in advance via email or a platform notification.

• The date of any changes will be shown at the top of this page under "Last Updated".
• Continued use of the platform after any changes have been made constitutes acceptance of the updated policy.
• To request a previous version, email support@goldbdt.app.

12. Contact & Complaints

For any questions, complaints, or requests regarding this Privacy Policy, please get in touch using the methods below.

• Email: support@goldbdt.app (include "Privacy" in the subject line)
• Live Chat: Log in to the platform and reach out via the support chat in Bangla.
• Help Center: Help Center Go to the "Privacy" section to find out more.

Goldbdt aims to respond to all privacy-related requests within 7 business days. If a matter requires more time, you will be informed in advance.