trackd Privacy Policy

01 / Data We Collect

Data We Collect

When you register for an account, use the trackd platform or interact with our support team, we collect personal data across several categories. The table below outlines each category, the specific data points involved, and the primary reason we collect them.

trackd does not knowingly collect personal data from individuals under the age of 18. If we discover that an account has been registered by a minor, we will close the account immediately and delete all associated personal data in accordance with our data retention schedule. If you believe a person under 18 has registered on trackd, please contact us at [email protected] so we can investigate and take immediate action.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health data, except where specifically required by applicable law or where you voluntarily provide such information in the context of a responsible gaming self-assessment. Any sensitive data provided in that context is handled with additional safeguards and is never used for marketing purposes.

02 / How We Use Your Data

How We Use Your Data

trackd processes your personal data only for clearly defined, legitimate purposes. We do not sell your personal data to third parties, and we do not use it for purposes incompatible with those for which it was originally collected. The legal bases on which we rely to process your data, and the corresponding purposes, are set out below.

• Account management: We process your identity and contact data to create and maintain your player account, authenticate your identity on login, and communicate important account notices including deposit confirmations, withdrawal updates, and security alerts. Legal basis: contractual necessity.
• Payment processing: Your financial data is processed to execute deposits and withdrawal transfers via bKash, Nagad, Rocket, Upay and supported bank channels. We retain transaction records to meet anti-money-laundering (AML) reporting obligations. Legal basis: contractual necessity and legal obligation.
• Fraud and AML compliance: Technical data and financial data are analysed to detect and prevent fraudulent activity, money laundering, multi-account abuse and other prohibited conduct. Where suspicious activity is identified, we are legally obliged to report it to the relevant authorities. Legal basis: legal obligation and legitimate interest.
• Responsible gaming: Usage data — including session lengths, betting patterns and deposit frequency — is monitored to identify signs of problem gambling. Where such indicators are detected, our responsible gaming team may proactively contact you to discuss support options. Legal basis: legitimate interest (player welfare).
• Platform improvement: Aggregated and anonymised usage data helps us understand how players navigate the trackd platform so we can improve the user experience, fix technical issues and prioritise new features. Legal basis: legitimate interest.
• Marketing communications: Where you have explicitly opted in to receive promotional communications, we will use your contact data and marketing preferences to send you relevant offers, bonus notifications and seasonal promotions such as those tied to BPL, IPL and Eid. You may withdraw your marketing consent at any time through your account settings or by contacting support. Legal basis: consent.
• Legal and regulatory compliance: We retain and process certain data to comply with applicable laws, respond to lawful requests from regulatory authorities, and defend against legal claims. Legal basis: legal obligation.

03 / Data Sharing & Third Parties

Data Sharing & Third Parties

trackd does not sell, rent or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment service providers: To process your deposits and withdrawals, we share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank and BRAC Bank. These providers process your data solely to execute the requested transaction and are bound by their own data protection obligations.
• KYC and identity verification partners: We use internationally recognised KYC platforms to verify your identity and age during registration and at subsequent verification checkpoints. These partners receive only the identity documents and data necessary to complete the verification check and are contractually prohibited from using your data for any other purpose.
• Game content providers: When you launch a game supplied by a third-party studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe or Ezugi, a session token and your anonymised player ID are passed to that provider to initialise the game. Game providers do not receive your full name, NID number, financial data or contact details.
• Analytics providers: Aggregated, pseudonymised technical and usage data may be shared with analytics platforms to help us understand site performance. This data cannot reasonably be used to identify any individual player.
• Law enforcement and regulatory authorities: Where required by applicable law, court order or legitimate regulatory request, we will disclose personal data to the appropriate authorities. We will notify you of such a disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or sale of all or part of the trackd business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and your privacy rights will continue to be protected under the new ownership.

All third-party data processors engaged by trackd are required to enter into a data processing agreement that obligates them to process your data only on our documented instructions, to implement appropriate technical and organisational security measures, and to delete or return all personal data upon termination of the service relationship.

04 / Cookies & Tracking

Cookies & Tracking

The trackd website uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep you securely logged in during your session, and — where you have given consent — to help us understand how players use the site so we can continuously improve it.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent the trackd platform from functioning correctly and may make it impossible to log in to your account. Disabling functional cookies will cause the platform to forget your display preferences between sessions. Disabling analytics and marketing cookies has no impact on your ability to use the core betting and casino features.

trackd does not use third-party advertising cookies to serve ads on external websites. Any marketing cookies placed by trackd are used solely to attribute new registrations to the relevant promotional campaign within the trackd platform itself.

05 / Data Retention

Data Retention

trackd retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods below represent our standard schedule. In some cases, data may be retained for longer where required by a legal obligation, regulatory investigation or active dispute.

When the applicable retention period expires, personal data is either securely deleted from our systems or fully anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data (for example, total bet volumes by game category) may be retained indefinitely for statistical analysis purposes.

06 / Your Privacy Rights

Your Privacy Rights

As a player on the trackd platform, you hold a number of rights with respect to your personal data. trackd is committed to respecting and facilitating these rights. To exercise any of the rights described below, please contact the trackd data protection contact at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to resolve it fully within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data that trackd holds about you, together with a description of the purposes for which it is processed, the categories of data involved, and the third parties with whom it has been shared. We will provide this information free of charge in a structured, commonly used electronic format.
• Right to rectification: If any personal data that trackd holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. You can update most contact details directly from your account settings page; for identity data such as name or date of birth, please contact the support team and provide an updated KYC document.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. Please note that this right is subject to overriding legal obligations — for example, we are required by AML law to retain certain financial records for a minimum period of 5 years regardless of an erasure request.
• Right to restrict processing: In certain circumstances — for example, while the accuracy of your data is being contested — you have the right to request that we restrict further processing of your data. During a restriction, we will continue to store the data but will not use it for any other purpose without your consent.
• Right to data portability: Where we process your data on the basis of consent or contractual necessity using automated means, you have the right to receive that data in a machine-readable format (such as JSON or CSV) so that it can be transferred to another service if you choose.
• Right to object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, although trackd may be able to demonstrate compelling legitimate grounds that override your objection in certain regulatory compliance contexts.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications or optional analytics cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

If you are dissatisfied with our response to a privacy rights request, you have the right to lodge a complaint with the supervisory authority in the jurisdiction applicable to your situation. trackd takes all privacy complaints seriously and will cooperate fully with any regulatory investigation.

07 / Data Security

Data Security

trackd implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. Our security programme is reviewed and updated on a regular basis to address evolving threats.

• 256-bit SSL/TLS encryption: All data transmitted between your device and the trackd servers is encrypted in transit using industry-standard 256-bit SSL/TLS. Our SSL certificate is issued by a trusted Certificate Authority and is renewed before expiry without interruption.
• Encrypted data at rest: Sensitive personal data — including identity documents, payment details and password hashes — is encrypted at rest in our databases. Passwords are stored as salted hashes using a modern one-way hashing algorithm; plain-text passwords are never stored at any point.
• Access controls: Access to personal data within trackd's internal systems is restricted on a strict need-to-know basis. All staff with access to player data are subject to background checks, confidentiality agreements, and regular security training.
• Two-factor authentication: The trackd platform supports two-factor authentication (2FA) via SMS OTP for player accounts. We strongly recommend all players enable 2FA from their account security settings to add a critical second layer of protection against unauthorised login attempts.
• Intrusion detection and monitoring: Our infrastructure is protected by continuous intrusion detection systems that alert the security team to suspicious access patterns in real time, 24 hours a day, 7 days a week on Bangladesh Standard Time.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, trackd will notify you and the relevant supervisory authority within the timeframe required by applicable law. The notification will describe the nature of the breach, the data affected, the likely consequences, and the measures we have taken or intend to take to address it.

08 / Policy Updates & Contact

Policy Updates & Contact

trackd may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. The "Last Updated" date at the top of this page will always reflect the most recent revision. Where a change is material — meaning it significantly affects how we handle your personal data or reduces your privacy rights — we will notify you directly via the email address registered to your account at least 14 days before the change takes effect.

Continued use of the trackd platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the changes, you should stop using the platform and contact us to request account closure. Your real-money balance will be returned to your verified payment method following the standard withdrawal process.

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to report a privacy concern, please contact the trackd data protection team using the details below. We handle all privacy enquiries on Bangladesh Standard Time (BST, UTC+6) and aim to provide a substantive initial response within one business day for urgent matters and within five business days for general enquiries.

This Privacy Policy is written and maintained in English (en-BD) and is the authoritative version for all players accessing the trackd platform from Bangladesh. In the event of any inconsistency between this English version and any translation, the English text takes precedence.