bdtupup Privacy Policy

When you interact with bdtupup — whether by registering an account, making a deposit, placing a bet, or simply browsing the platform — certain categories of personal information are collected. This information falls into the following groups:

Identity & Contact Data: This includes your full legal name, date of birth, gender, Bangladeshi National ID (NID) number, email address, and mobile phone number. This data is collected at the point of registration and is used primarily for account creation, identity verification, and communication with you regarding your account.

Financial Data: When you make a deposit or request a withdrawal, bdtupup collects data relating to your payment method. For mobile financial services (bKash, Nagad, Rocket, Upay), this includes the mobile wallet number associated with your account. For bank card payments (Visa, Mastercard), we collect masked card details (the last four digits and expiry date only — full card numbers are never stored by bdtupup and are processed directly by our PCI-compliant payment gateway partners). For bank transfers via Dutch-Bangla Bank, BRAC Bank, City Bank, or Islami Bank, we may collect your account name and branch details for reconciliation purposes.

Technical & Usage Data: This covers information automatically generated when you access bdtupup, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and clickstream data. This data is collected through server logs and analytics tools and is used to maintain platform performance, detect fraud, and improve the user experience.

Gaming Activity Data: We record detailed information about your activity on bdtupup, including game sessions (titles played, stakes placed, wins and losses), sports betting selections, bonus usage, and interaction with promotional offers. This data is essential for operating the platform, resolving disputes, and fulfilling responsible gaming obligations.

Communication Data: When you contact bdtupup support, any messages, emails, or chat transcripts exchanged are retained as part of your account record. This enables continuity of support and assists in resolving complaints or disputes.

bdtupup uses the personal data we collect for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with those purposes. The primary uses of your personal data are as follows:

Marketing Communications: If you have opted in to receive promotional communications from bdtupup, we may use your email address and mobile number to send you information about bonuses, seasonal promotions (Eid, Pohela Boishakh, BPL season, Victory Day), new game launches, and platform updates. You may opt out of marketing communications at any time by following the unsubscribe instructions included in every marketing message, or by contacting [email protected].

Automated Decision-Making: bdtupup uses automated systems to assist with fraud detection, bonus eligibility assessments, and responsible gaming interventions. Where an automated decision has a significant effect on your account (for example, triggering a withdrawal hold or account review), you have the right to request human review of that decision. Contact our support team to exercise this right.

Every instance of personal data processing carried out by bdtupup is grounded in one of the following recognised legal bases:

• Contractual Necessity: Processing that is required to fulfil our obligations to you under the bdtupup Terms & Conditions — such as operating your account, processing transactions, and providing access to games and betting markets.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) rules, know-your-customer (KYC) regulations, financial record-keeping requirements, and law enforcement requests made through proper legal channels.
• Legitimate Interests: Processing that serves bdtupup's genuine business interests, provided those interests are not overridden by your fundamental privacy rights. This includes fraud prevention, platform security, analytics to improve platform performance, and responsible gaming monitoring. We conduct a balancing test before relying on legitimate interests as a legal basis, and we only proceed where the impact on your privacy is proportionate and expected.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous agreement. Marketing communications, non-essential cookies, and personalised promotional targeting all require your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bdtupup uses cookies and similar tracking technologies (including pixel tags and local storage objects) to enhance platform functionality, maintain session continuity, and gather analytics data. Cookies are small text files placed on your device when you visit the bdtupup website.

Categories of Cookies Used:

• Strictly Necessary Cookies: These cookies are essential for the bdtupup platform to function correctly. They enable core features such as maintaining your login session, securing your account connection, and remembering your cookie consent preferences. These cookies cannot be disabled, as the platform cannot function without them. No consent is required for strictly necessary cookies.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors use bdtupup — which pages are visited most often, how long sessions last, and where errors occur. This data helps us improve the platform experience. These cookies are only placed with your consent.
• Functional Cookies: These cookies remember your preferences (such as your preferred language settings or last-viewed game category) to provide a more personalised experience on return visits. These cookies are only placed with your consent.
• Marketing & Targeting Cookies: If you have opted in to personalised promotions, marketing cookies may be used to build a profile of your interests based on your activity on bdtupup. This enables us to send you offers that are relevant to the games and betting markets you prefer. These cookies are only placed with your explicit consent and are never shared with third-party advertisers outside of our direct promotional partners.

Managing Cookies: You may adjust your cookie preferences at any time through your browser settings. Most modern browsers allow you to block, delete, or be notified before cookies are placed. Note that disabling strictly necessary cookies will prevent you from using the bdtupup platform. Disabling analytics or functional cookies will limit certain personalisation features but will not prevent platform access.

bdtupup does not sell, rent, or trade your personal data to third parties. Your data is shared only where strictly necessary and under legally compliant conditions, as described below:

• Payment Processors: To process your deposits and withdrawals, bdtupup shares the minimum necessary financial and identity data with our payment gateway partners (including bKash, Nagad, Rocket, Upay, and card processing networks). Each payment partner operates under their own privacy policy and is bound by contractual data protection obligations with bdtupup.
• KYC & Identity Verification Providers: To fulfil our know-your-customer obligations, bdtupup may use third-party identity verification services. Your NID data and submitted documents are shared with these providers solely for verification purposes and are subject to strict data processing agreements.
• Game Providers: When you play a game hosted by a third-party studio (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), a session token and anonymised player identifier are shared with that provider to facilitate gameplay. Full identity data is not transmitted to game providers.
• Fraud Prevention & AML Services: bdtupup may share transaction data and identity information with fraud detection services and financial intelligence tools as part of our legal obligations to prevent money laundering and financial crime.
• Legal & Regulatory Authorities: bdtupup will disclose personal data to law enforcement, regulatory bodies, or courts of competent jurisdiction when legally required to do so. We will not voluntarily disclose your data to authorities beyond our strict legal obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of bdtupup's business assets, your personal data may be transferred to the acquiring entity as part of that transaction, provided the acquiring entity agrees to honour the commitments made in this Privacy Policy.

bdtupup retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our key retention periods are as follows:

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised, aggregated data (from which individual players cannot be identified) may be retained indefinitely for statistical and business improvement purposes.

Players who request account closure are informed that certain data categories will be retained beyond the closure date for the legally required periods outlined above. This retention is a legal obligation, not discretionary policy.

As a bdtupup player, you hold the following rights with respect to your personal data. These rights apply to all data processing activities described in this Privacy Policy and can be exercised at any time by contacting [email protected]:

• Right of Access: You have the right to request a copy of all personal data bdtupup holds about you, along with information about how it is being processed. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data (such as your name or date of birth), correction requests may require supporting documentation.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you may request that bdtupup delete your personal data. This right applies where the data is no longer necessary for its original purpose, where you withdraw consent and no other legal basis applies, or where the data has been unlawfully processed. Note that this right is subject to our legal data retention obligations — financial transaction records and KYC data cannot be deleted within their legally mandated retention periods.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted directly to another controller, where technically feasible and where processing is based on your consent or contractual necessity.
• Right to Restrict Processing: You may request that bdtupup restrict the processing of your personal data in specific circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
• Right to Object: Where processing is based on legitimate interests, you have the right to object to that processing. bdtupup will cease processing unless we can demonstrate compelling legitimate grounds that override your interests. You have an unconditional right to object to processing for direct marketing purposes.
• Rights Related to Automated Decision-Making: You have the right not to be subject to decisions that are based solely on automated processing, including profiling, where that decision produces significant legal or similarly significant effects on you. You may request human review of any automated decision that has materially affected your account.

All data rights requests will be acknowledged within 5 business days and fulfilled within 30 calendar days. In cases of complexity or high volume, this period may be extended by a further 30 days with prior notification. No fees are charged for exercising data rights, except where requests are manifestly unfounded or excessive.

bdtupup implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bdtupup platform is encrypted using industry-standard TLS 1.3 protocols. Our SSL certificate is actively maintained and monitored.
• Data Encryption at Rest: Sensitive personal data stored in bdtupup databases (including NID data and payment method details) is encrypted at rest using AES-256 encryption standards.
• Access Controls: Personal data is accessible only to bdtupup personnel with a legitimate operational need. Role-based access controls (RBAC) are enforced, and access logs are maintained and audited regularly. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): Internal bdtupup systems handling personal data require 2FA for all staff logins. Players are strongly encouraged to enable 2FA on their own accounts for additional protection.
• Penetration Testing & Vulnerability Scanning: bdtupup conducts regular security assessments, including penetration testing and automated vulnerability scanning, to proactively identify and remediate potential weaknesses.
• Incident Response: In the event of a personal data breach that poses a risk to player rights and freedoms, bdtupup will notify affected players and relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable notification requirements.

While bdtupup takes every reasonable step to protect your data, no digital system is entirely immune to risk. You also play a role in keeping your data safe — please use a strong, unique password for your bdtupup account, enable 2FA where available, and contact [email protected] immediately if you suspect unauthorised access to your account.

The bdtupup platform integrates with a number of third-party service providers that are essential to delivering our core product. Each of these providers processes limited personal data solely to perform their contracted function. We maintain data processing agreements with all third-party processors to ensure your data is handled in accordance with the standards described in this Privacy Policy.

Payment Service Providers: bKash, Nagad, Rocket, and Upay process mobile financial service transactions. Visa and Mastercard card transactions are handled by our PCI-DSS compliant payment gateway partner. Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank facilitate bank transfer transactions. Each provider operates under their own published privacy and security policies.

Game Studios: bdtupup features games from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, an anonymised session token is passed to the relevant game server. Your full personal identity is not transmitted to game providers. Game outcomes and session data are returned to bdtupup and logged against your account.

Analytics Providers: With your consent, bdtupup uses analytics tools to measure platform usage, identify performance issues, and guide product development. Analytics data is processed in aggregated, pseudonymised form wherever possible. Individual user profiles are not shared with analytics providers.

External Links Disclaimer: The bdtupup website does not contain links to external third-party websites. This Privacy Policy applies solely to data processed in connection with the bdtupup platform at https://bdtupup.net. bdtupup is not responsible for the privacy practices of any third-party service, even where that service is integrated into the platform to deliver a specific function.

bdtupup reviews and updates this Privacy Policy periodically to reflect changes in data protection law, evolving best practices, new platform features, or changes to the third-party services we rely on. The "Last Updated" date displayed at the top of this page indicates when the current version came into effect.

Where a material change is made to this Privacy Policy — meaning a change that substantively affects how we collect, use, or share your personal data — bdtupup will notify registered players via the email address on file at least 7 calendar days before the change takes effect. For minor, non-material changes (such as typographical corrections or clarifications that do not alter the substance of our data practices), we may update the policy without individual notification, relying solely on the updated "Last Updated" date as notice.

Your continued use of the bdtupup platform after any Privacy Policy update constitutes your acknowledgement of the revised terms. If you do not agree with a material change, you are entitled to close your account and request deletion of your personal data to the extent permitted by our legal retention obligations.

Version History: The current version of this Privacy Policy is Version 1.0, effective 1 January 2026. Previous versions are available upon request by contacting [email protected].