bdd222 Privacy Policy

1 Introduction

bdd222 is Bangladesh's premier online casino and sports betting platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. As part of delivering a secure, personalised, and legally compliant gaming experience, bdd222 processes certain categories of personal data about its registered players and website visitors.

We take data privacy seriously. This Policy sets out in plain, formal English precisely what data we collect, why we collect it, how we protect it, and what choices you have regarding your personal information. If you have any questions that are not addressed here, our 24/7 support team is available via live chat on the platform.

2 Data We Collect

bdd222 collects personal data through several channels: information you provide directly during registration and KYC, data generated automatically through your use of the platform, and information received from trusted third-party service providers such as payment processors and identity verification partners.

2.1 Registration & Account Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify you are 18 years of age or older).
• Residential address in Bangladesh (street, district, division, postcode).
• Email address (used for account communications and verification).
• Mobile number associated with your preferred payment method (bKash, Nagad, Rocket, or Upay).
• Username and encrypted password hash (we never store plain-text passwords).

2.2 KYC & Identity Verification Data

• Scanned or photographed copies of your National Identity Card (NID), passport, or driving licence.
• Proof of residential address documents (utility bills, bank statements, official correspondence).
• Proof of payment method ownership (screenshots or MFS confirmation screens showing the account belongs to you).
• Selfie photographs submitted as part of liveness verification, where required.

2.3 Transaction & Financial Data

• Deposit and withdrawal amounts, dates, times, and payment method references.
• bKash, Nagad, Rocket, Upay, or bank account transaction IDs (reference numbers only — bdd222 does not store full mobile banking PINs or bank account passwords).
• Bonus credits issued, wagering activity against those bonuses, and withdrawal requests.
• Account balance history and transaction ledger records.

2.4 Gameplay & Betting Data

• Game session records, bet amounts, game outcomes, and session durations across all bdd222 products including slots, live casino, cricket betting, Monster Crash, and Fisher Game.
• Sports betting selections, odds accepted, stake amounts, and settlement outcomes for cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers), football, and other available markets.
• Responsible gaming tool usage — deposit limit settings, session time alerts, cooling-off requests, and self-exclusion history.

2.5 Technical & Device Data

• IP address and approximate geolocation (country and city level).
• Device type, operating system, browser type and version.
• Session timestamps, page views, and navigation path data.
• Error logs and crash reports (used to diagnose and fix platform issues).

2.6 Communication Data

• Live chat transcripts between you and bdd222 support agents.
• Email correspondence sent to or received from [email protected].
• Dispute records and formal complaint submissions.

3 How We Use Your Data

bdd222 uses your personal data for the following specific purposes, each of which corresponds to a defined legal basis described in Section 4:

• Account Creation & Management: To create, maintain, and administer your bdd222 player account, including verifying your identity and age during the registration process.
• KYC & Compliance: To fulfil anti-money laundering (AML) obligations, verify the source of funds, and comply with applicable regulatory requirements by conducting identity and document verification checks before processing withdrawal requests.
• Payment Processing: To facilitate deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, and supported banking channels, and to maintain accurate financial records of all transactions.
• Service Delivery: To provide access to the bdd222 game library, sportsbook, live casino, and all other platform features, and to personalise your experience based on your gaming preferences and history.
• Fraud & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the bdd222 Terms & Conditions.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to administer deposit limits, cooling-off periods, and self-exclusion requests, and to comply with responsible gaming obligations.
• Customer Support: To respond to enquiries, resolve disputes, and provide assistance via live chat, email, and WhatsApp communications.
• Platform Improvement: To analyse aggregate, anonymised usage data for the purpose of improving platform performance, game selection, and user experience — not for profiling individual players.
• Legal Obligations: To retain records as required by applicable law, including AML record-keeping obligations that require transaction and identity data to be retained for a minimum of five years.

4 Legal Basis for Processing

bdd222 processes personal data only where a valid legal basis exists. The legal bases applicable to our processing activities are as follows:

• Contractual Necessity: Processing your registration data, KYC documentation, and financial transaction records is necessary to enter into and perform the contract between you and bdd222 as set out in the Terms & Conditions.
• Legal Obligation: Retaining KYC documents, transaction records, and AML-related data for the legally mandated minimum period is required by applicable law and cannot be waived by your consent or objection.
• Legitimate Interests: Processing technical and device data for fraud prevention, platform security, and responsible gaming monitoring is carried out on the basis of bdd222's legitimate interests in operating a safe, fair, and secure gambling platform. These interests are balanced against and do not override your fundamental privacy rights.
• Consent: Where bdd222 sends you promotional communications about new games, bonuses, or seasonal offers (such as Eid, Pohela Boishakh, or BPL season promotions), this is done on the basis of your explicit consent, which you may withdraw at any time by contacting support or updating your account communication preferences.

5 Sharing Your Data

bdd222 does not sell, rent, or trade your personal data. We share personal data only with the following categories of third-party recipients, and only to the extent necessary to fulfil the stated purpose:

5.1 Payment Service Providers

Transaction reference data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard solely for the purpose of processing deposit and withdrawal transactions. bdd222 does not transmit your full financial credentials — only the transaction reference required to confirm payment status.

5.2 KYC & Identity Verification Partners

Where bdd222 engages a third-party identity verification service provider to assist with document authentication and liveness checks, your KYC documents and associated identity data are shared with that provider under a strict data processing agreement that prohibits the provider from using your data for any purpose other than KYC verification on bdd222's behalf.

5.3 Game Software Providers

Gameplay session data (anonymised player ID, bet amounts, game outcomes) is exchanged with game suppliers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to enable game delivery, result certification, and technical support. These providers do not receive personally identifiable information such as your name, address, or NID number.

5.4 Legal & Regulatory Authorities

bdd222 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by applicable law, a valid court order, or a formal regulatory request. bdd222 will, where legally permitted, notify you of any such disclosure.

5.5 Professional Advisers

bdd222's legal counsel, auditors, and insurance providers may have access to limited categories of personal data where strictly necessary for the provision of their professional services. All such advisers are bound by professional confidentiality obligations.

6 Cookies & Tracking Technologies

bdd222 uses cookies and similar technologies (local storage, session tokens) on the bdd222.app website. The following categories of cookies are in use:

• Essential Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking platform functionality.
• Functional Cookies: Remember your preferences such as language selection, display settings, and last-visited game category to improve your experience on return visits.
• Analytics Cookies: Collect aggregate, anonymised data about how players navigate the site — which pages are visited most often, how long sessions last, and which game categories are most popular. This data is used exclusively to improve the platform and is never linked back to your individual identity.

bdd222 does not use advertising or targeting cookies. You may manage cookie preferences through your browser's privacy settings. Disabling essential cookies will prevent you from logging in to your bdd222 account.

7 Data Retention

bdd222 retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account & KYC Data: Retained for a minimum of five (5) years following account closure, as required by applicable anti-money laundering regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• Gameplay & Betting History: Retained for three (3) years following account closure, or for the duration required for active dispute or fraud investigations, whichever is longer.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, unless they are relevant to an ongoing dispute.
• Technical & Device Logs: Retained for ninety (90) days in standard operational logs, and for up to two (2) years in security incident logs.
• Self-Exclusion Records: Retained indefinitely following a permanent self-exclusion request to prevent re-registration by a player who has voluntarily excluded themselves from the platform.

Following the expiry of the applicable retention period, personal data is either securely deleted from bdd222 systems or irreversibly anonymised so that it can no longer be linked to any individual.

8 Data Security

bdd222 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. Key measures include:

• Encryption in Transit: All communications between your device and bdd222 servers are encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms that your session is protected.
• Encryption at Rest: Sensitive personal data — including KYC documents, identity records, and financial data — is encrypted at rest using AES-256 encryption on bdd222 servers.
• Access Controls: Access to personal data within bdd222 is restricted on a strict need-to-know basis. Only support agents, compliance officers, and technical staff with a legitimate operational need may access player records, and all such access is logged and auditable.
• Password Security: bdd222 never stores plain-text passwords. All account passwords are stored as salted cryptographic hashes. Players are strongly encouraged to use a unique, strong password and to enable two-factor authentication (2FA) on their account.
• Security Audits: bdd222 conducts regular internal security reviews and works with external security specialists to perform periodic vulnerability assessments of the platform infrastructure.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, bdd222 will notify affected players as soon as reasonably practicable and will take immediate steps to contain and remediate the breach.

9 Your Rights

As a data subject whose personal information is processed by bdd222, you hold the following rights. To exercise any of these rights, please contact the bdd222 support team via live chat or email at [email protected]:

• Right of Access: You may request a copy of all personal data that bdd222 holds about you. bdd222 will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data bdd222 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact support and provide the correct information along with supporting documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to bdd222's legal obligation to retain certain records for the minimum statutory period described in Section 7.
• Right to Restriction: You may request that bdd222 restrict its processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to bdd222, in a structured, commonly used format.
• Right to Object: You may object to bdd222 processing your data on the basis of legitimate interests. bdd222 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where bdd222 processes your data on the basis of your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bdd222 will not charge a fee to process legitimate data rights requests. However, bdd222 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, excessive, or repetitive.

10 Children's Privacy

The bdd222 platform is strictly intended for adults aged 18 years and above. bdd222 does not knowingly collect, store, or process personal data belonging to persons under 18 years of age. The registration process includes mandatory age verification, and KYC checks confirm the age of all players before withdrawal rights are activated.

If bdd222 becomes aware that personal data has been collected from a person under the age of 18, the associated account will be immediately closed, any real-money balance will be returned to the depositing payment method, and all personal data collected will be securely deleted as promptly as practicable. Parents or guardians who believe their child has accessed bdd222 should contact support immediately via live chat.

11 International Data Transfers

bdd222 primarily serves the Bangladesh market and endeavours to process and store personal data within its operational infrastructure. Where the use of third-party service providers — such as game software suppliers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) or KYC verification partners — results in personal data being processed outside Bangladesh, bdd222 ensures that appropriate safeguards are in place.

Such safeguards include contractual data processing agreements that require the receiving party to apply data protection standards equivalent to those described in this Policy. bdd222 does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first implementing appropriate contractual, technical, or organisational safeguards.

12 Third-Party Links

The bdd222 platform does not contain links to external third-party websites for general browsing purposes. All navigation on bdd222.app remains within the bdd222 domain. In the event that any future feature or promotional content contains a reference to a third-party service, bdd222 wishes to make clear that it is not responsible for the privacy practices or content of any third-party website. Players who navigate away from bdd222.app to any external site do so at their own risk and should review the applicable privacy policy of that external site independently.

13 Policy Amendments

bdd222 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or our data processing practices. The revised Policy will be published on this page with an updated effective date at the top of the document.

Where an amendment is material — meaning it significantly affects how we collect, use, or share your personal data — bdd222 will notify registered players via the email address associated with their account before the change takes effect. Your continued use of the bdd222 platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how bdd222 protects your personal information.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdd222 handles your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the bdd222 platform. Average response time under 5 minutes (BST, UTC+6).
• Email: [email protected] — plain text, not a clickable link.
• WhatsApp: +880 1700-000000 — plain text, not a clickable link.

When contacting bdd222 regarding a data rights request, please include your registered account username, the specific right you wish to exercise, and any relevant details to help our team process your request efficiently. bdd222 aims to acknowledge all data rights requests within 5 business days and to resolve them within 30 calendar days.