bdg222 Privacy Policy

bdg222 ("we", "us", "our", or "the Platform") is committed to protecting and respecting the privacy of all individuals who access or use the bdg222 platform at bdg222.app ("the Site"). This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by bdg222.

This Policy applies to all users of the bdg222 platform, including registered account holders, visitors who browse the Site without registering, and individuals who contact us via our support channels. By accessing the Site or creating an account, you acknowledge that you have read, understood, and agreed to the terms of this Policy.

This Policy should be read alongside the bdg222 Terms & Conditions, which govern your use of the platform as a whole. If you do not agree with any part of this Policy, you should discontinue use of the Site immediately.

bdg222 collects personal data in order to operate the platform, verify player identity, process transactions, and fulfil our compliance obligations. The categories of personal data we may collect include:

We collect only the minimum personal data necessary for the stated purposes and do not process special categories of sensitive personal data (such as health data, racial or ethnic origin, or biometric data) unless specifically required by law or regulatory obligation and with your explicit consent where required.

bdg222 collects personal data through several distinct channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions. This is the primary source of identity, contact, and financial data.
• Automated Collection: Technical and usage data collected automatically as you interact with the Site, including through cookies, web beacons, log files, and session tracking technologies embedded in the platform.
• Third-Party Payment Providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, we may receive transaction confirmation data from those providers to reconcile your account balance and verify payment ownership.
• Identity Verification Services: In some cases, bdg222 may use third-party identity verification tools to cross-reference the documents you submit during KYC against official databases to confirm their authenticity.
• Analytics Platforms: Aggregated, anonymised usage data may be collected via analytics tools to help us understand platform traffic patterns, game popularity, and user engagement metrics.

bdg222 processes personal data for the following specific purposes:

• Account Management: To register you as a player, maintain your account, authenticate your login sessions, and manage your account preferences and settings.
• Identity and Age Verification: To comply with our Know Your Customer (KYC) obligations and confirm that all registered players are aged 18 or above. This is a mandatory processing activity that cannot be opted out of.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, reconcile account balances, and maintain accurate financial records.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gaming: To monitor your gaming activity and intervene when patterns suggest potential problem gambling behaviour, in fulfilment of our duty of care to players.
• Customer Support: To respond to your queries, resolve complaints, and provide technical assistance when you contact the bdg222 support team.
• Legal and Regulatory Compliance: To fulfil obligations arising from applicable laws, including record-keeping requirements and cooperation with lawful requests from authorities.
• Platform Improvement: To analyse aggregated usage data and improve the functionality, content, and user experience of the bdg222 platform over time.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaigns where you have provided consent or where a legitimate interest applies. You may opt out at any time.

bdg222 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and bdg222, including account registration, transaction processing, and KYC verification. Without this processing, bdg222 cannot provide you with its services.
• Legal Obligation: Processing that is required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and record-keeping mandates.
• Legitimate Interests: Processing that is necessary for bdg222's legitimate interests, including fraud detection, platform security, abuse prevention, and analytics — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as the receipt of marketing communications. Consent-based processing may be withdrawn by you at any time without affecting the lawfulness of prior processing.

bdg222 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your personal data with the following categories of recipient in the following limited circumstances:

• Payment Processors: bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and is independently responsible for its data handling practices.
• Identity Verification Providers: Third-party KYC service providers may receive copies of identity documents you submit in order to verify their authenticity against official records. These providers are bound by strict confidentiality obligations.
• Technology and Infrastructure Providers: Companies that provide server hosting, cloud storage, platform software, and related technical infrastructure may have access to personal data in the course of providing those services. Such providers are bound by data processing agreements with bdg222.
• Analytics Providers: Aggregated and anonymised usage data may be shared with analytics platforms to support platform performance monitoring. No personally identifiable information is included in such data sets.
• Legal and Regulatory Authorities: bdg222 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by law, court order, or valid legal process. bdg222 will take reasonable steps to notify you of such disclosures unless legally prohibited from doing so.
• Professional Advisers: Lawyers, accountants, auditors, and other professional advisers retained by bdg222 may access personal data on a need-to-know basis in connection with their professional services, subject to professional confidentiality obligations.

bdg222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law or regulation. The following general retention periods apply:

• Account Data: Retained for the duration of your active account and for a period of at least five (5) years following account closure, in accordance with standard financial record-keeping practices.
• KYC Documents: Copies of identity documents submitted during the KYC process are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: Deposit, withdrawal, and gaming transaction records are retained for a minimum of five (5) years to support anti-money laundering compliance and dispute resolution.
• Support Communications: Chat transcripts and email correspondence with the support team are retained for up to three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical and Usage Data: Log files, IP addresses, and session data are typically retained for up to twelve (12) months for security and fraud investigation purposes.
• Marketing Consent Records: Records of your marketing consent or opt-out preferences are retained for the duration of your account and for three (3) years following account closure.

At the end of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with you as an identifiable individual.

bdg222 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and bdg222.app is encrypted in transit using SSL/TLS protocols, ensuring that your login credentials, payment details, and personal information cannot be intercepted by third parties.
• Encrypted Storage: Sensitive data fields stored in our databases — including passwords and payment account identifiers — are encrypted at rest using industry-standard cryptographic algorithms. Passwords are hashed and never stored in plain text.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. bdg222 staff are granted data access permissions only to the extent necessary for their specific job function. All access events are logged.
• Two-Factor Authentication: Administrative and back-end system access at bdg222 is protected by multi-factor authentication to reduce the risk of unauthorised access following credential compromise.
• Regular Security Audits: bdg222 conducts periodic reviews of its technical infrastructure and data security practices to identify vulnerabilities and ensure that security standards remain current.
• Incident Response: In the event of a data security incident that affects your personal data, bdg222 has incident response procedures in place to contain the incident, assess its impact, and notify affected players where required.

While bdg222 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You acknowledge that the security of data transmitted over the internet is inherently subject to risks beyond bdg222's control and that bdg222 cannot guarantee absolute security.

bdg222 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. The following categories of cookies are used on bdg222.app:

• Strictly Necessary Cookies: These cookies are essential for the Site to function correctly. They enable core features such as session management, login authentication, and security token validation. These cookies cannot be disabled without breaking the platform's core functionality.
• Functional Cookies: These cookies remember your preferences and settings (such as preferred language and display options) to personalise your experience on the platform without requiring you to re-enter preferences on each visit.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how users navigate and interact with the platform. This information helps bdg222 understand which features are most used and where the platform can be improved. No personally identifiable information is included in analytics cookie data.
• Security Cookies: These cookies are used to detect and prevent fraudulent activity, including identifying unusual login patterns and flagging suspicious account behaviour.

Most web browsers allow you to manage cookie preferences through their settings panels. You may set your browser to refuse all cookies, or to alert you when cookies are being sent. Please note that disabling strictly necessary cookies will affect your ability to log in and use core platform features on bdg222.app.

As a data subject whose personal information is processed by bdg222, you have the following rights in respect of your personal data. To exercise any of these rights, please contact the bdg222 support team using the details provided in Section 15.

• Right of Access: You have the right to request a copy of the personal data that bdg222 holds about you, together with information about how and why it is being processed.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or out of date. For basic account details, you may be able to update information directly within your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that bdg222 deletes your personal data. This right is subject to exceptions — for example, where bdg222 is required to retain data to comply with a legal obligation or to defend a legal claim.
• Right to Restrict Processing: You have the right to request that bdg222 temporarily suspends the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.
• Right to Data Portability: Where processing is carried out by automated means and on the basis of your consent or a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where bdg222 relies on legitimate interests as its legal basis. bdg222 will cease processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bdg222 aims to respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it.

bdg222 may send you promotional communications about bonuses, new games, seasonal offers (such as BPL season promotions, Eid special offers, and Pohela Boishakh campaigns), and other platform news. These communications may be delivered via email or SMS to the contact details you registered with your account.

You may opt out of receiving marketing communications from bdg222 at any time using any of the following methods:

• Clicking the unsubscribe link included in any promotional email from bdg222
• Updating your communication preferences within your bdg222 account settings
• Contacting the bdg222 support team via live chat on bdg222.app and requesting removal from the marketing list

Please note that opting out of marketing communications does not affect the delivery of transactional and operational messages (such as deposit confirmations, withdrawal notifications, account security alerts, and KYC request notices). These communications are necessary for the operation of your account and cannot be opted out of while your account remains active.

The bdg222 platform is strictly intended for adults aged 18 and above. bdg222 does not knowingly collect, process, or store personal data relating to individuals under the age of 18. Age verification is a mandatory step in our account registration and KYC process, and accounts found to be held by minors will be closed immediately.

If you are a parent or guardian and believe that a person under the age of 18 has accessed the bdg222 platform or provided their personal data without your consent, please contact the bdg222 support team immediately. We will investigate the matter promptly and take appropriate action, including the deletion of any personal data associated with the minor's account.

The bdg222 platform may contain references to third-party services, payment providers (bKash, Nagad, Rocket, Upay), and game software providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi). Where the bdg222 interface connects to or incorporates services operated by these third parties, those parties may process personal data under their own independent privacy policies.

bdg222 is not responsible for the privacy practices of third-party service providers. When you interact with a third-party service — for example, completing a payment transaction via the bKash app — you are subject to that third party's terms and privacy policy. We encourage you to review the privacy policies of any third-party services you use in connection with the bdg222 platform.

bdg222 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made to this Policy, we will notify registered players by posting a prominent notice on bdg222.app and, where appropriate, by sending a notification to the email address associated with your account.

The effective date at the top of this Policy will be updated whenever a revised version comes into force. Your continued use of the bdg222 platform after the revised Policy's effective date constitutes your acceptance of the updated terms. If you do not agree to the updated Policy, you must cease using the platform and request account closure in accordance with the Terms & Conditions.

We recommend that you review this Privacy Policy periodically — at least once every three months if you are an active account holder — to remain informed of how bdg222 handles your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdg222 processes your personal data, please contact the bdg222 data support team through one of the following channels:

• Live Chat: Available 24/7 directly on the bdg222.app platform. This is the fastest and most direct channel to reach our support team for privacy-related queries.
• Email: [email protected] — this address is provided for correspondence only and is not a clickable link. Copy the address into your email client to contact us. Please include "Privacy Policy Query" in the subject line to ensure your message is routed to the appropriate team.

The bdg222 support team includes English-speaking and Bengali-speaking agents. Our team operates across Bangladesh Standard Time (UTC+6) hours and aims to acknowledge all privacy-related correspondence within one business day, with a full response provided within 30 days.