bd222t Privacy Policy

This Privacy Policy describes the data practices of bd222t (referred to in this document as "bd222t ", "we", "us", "our") with respect to personal data collected from users ("you", "your", "member") who access the platform at https://bd222t.app. bd222t is committed to protecting the privacy of all members, particularly those accessing the platform from Bangladesh, and to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles.

This policy applies to all personal data collected through the bd222t website, mobile web application, customer support channels, and any other means by which you interact with bd222t. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

If you have any questions about this policy or the way bd222t handles your personal data, please contact our support team at [email protected] before using the platform.

For the purposes of applicable data protection law, bd222t acts as the data controller in respect of the personal data collected through the platform. As data controller, bd222t determines the purposes for which and the means by which personal data is processed. All data rights requests and privacy-related enquiries should be directed to the contact details provided in Section 14 of this policy.

Where bd222t engages third-party service providers to process personal data on its behalf (for example, payment processors or fraud-detection services), those providers act as data processors and are contractually bound to process data only in accordance with bd222t's documented instructions and in compliance with applicable data protection standards.

bd222t collects the following categories of personal data from members and platform visitors:

bd222t does not collect sensitive personal data (such as biometric data, racial or ethnic origin, religious beliefs, or health information) unless specifically required for responsible gaming obligations or age-verification purposes, in which case your explicit consent will be obtained prior to collection.

bd222t collects personal data through the following methods:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated collection: Technical and usage data collected automatically when you access the bd222t platform, via server logs, session tracking, and analytics tools operated by bd222t.
• Third-party sources: Identity and fraud-risk data received from payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and others) in connection with transaction verification, and age/identity verification data from third-party KYC providers where applicable.
• Cookies and tracking technologies: Data collected via cookies and similar technologies as described in Section 7 of this policy.

bd222t processes your personal data only where a valid legal basis exists. The following table summarises the primary purposes for which we process data and the corresponding legal basis for each:

Where bd222t relies on consent as the legal basis for processing — primarily for marketing communications — you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6.1 Payment Processors. To process your deposits and withdrawals, bd222t shares the minimum necessary financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Each payment partner operates under its own privacy and data security frameworks and processes your data solely for the purpose of completing the relevant transaction.

6.2 Identity Verification Providers. Where bd222t uses a third-party KYC or age-verification provider to confirm the identity of a member, identity data will be shared with that provider for the sole purpose of completing the verification check. Verification providers are contractually prohibited from retaining or using your data for any other purpose.

6.3 Fraud Detection and Security. bd222t may share technical and account data with fraud detection and cybersecurity service providers in order to identify, investigate, and prevent fraudulent activity, money laundering, and other platform abuses. This processing is conducted on the basis of bd222t's legitimate interest in maintaining platform integrity.

6.4 Legal and Regulatory Disclosure. bd222t may disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required to do so by applicable law, court order, or in connection with the investigation of suspected criminal activity. Such disclosures will be limited to what is strictly required.

6.5 No Sale of Data. bd222t does not sell, rent, license, or otherwise transfer your personal data to third parties for their own marketing, advertising, or commercial purposes. This commitment applies without exception.

bd222t uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit the bd222t website. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for platform operation, including session management, login authentication, and security functions. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and account options, to improve your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how members use the platform — including pages visited, session duration, and feature engagement — to help bd222t identify areas for improvement.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and account takeover attempts.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the bd222t platform. Analytics and functional cookies may be disabled without affecting core platform functionality, though some personalisation features may be unavailable.

bd222t implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the bd222t platform.
• Encrypted storage of all sensitive personal and financial data at rest, using industry-standard encryption algorithms.
• Access controls restricting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging.
• Two-factor authentication (2FA) available for member accounts to provide an additional layer of login security.
• Regular security assessments and penetration testing to identify and remediate vulnerabilities in the platform infrastructure.
• Incident response procedures to detect, respond to, and notify affected members of any data security incident within a reasonable timeframe.

While bd222t takes all reasonable precautions to protect your data, no system connected to the internet can guarantee absolute security. Members are encouraged to use strong, unique passwords for their bd222t accounts and to enable 2FA where available.

bd222t retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in order to comply with anti-money-laundering and responsible gaming record-keeping requirements.
• Financial transaction data: Retained for a minimum of 5 years following the relevant transaction, in accordance with applicable financial record-keeping obligations.
• Communications and support data: Retained for 2 years from the date of the relevant interaction, or longer where a dispute remains unresolved.
• Technical and usage data: Retained in identifiable form for up to 13 months and thereafter in anonymised or aggregated form for analytical purposes.
• Marketing consent records: Retained for as long as you hold an active bd222t account and for 2 years following account closure, as evidence of consent.

When data reaches the end of its retention period, it is securely deleted from bd222t's systems or irreversibly anonymised so that it can no longer be associated with an individual member.

As a bd222t member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with your request and sufficient information to verify your identity.

• Right of Access: You may request a copy of the personal data bd222t holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. Where possible, you may update certain data directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to any overriding legal or regulatory obligation that requires retention.
• Right to Restrict Processing: You may request that bd222t limits the processing of your personal data in certain circumstances, such as while a dispute regarding accuracy is being resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format where the processing is based on your consent or on a contract between you and bd222t.
• Right to Object: You may object to processing based on bd222t's legitimate interests, including profiling for fraud detection. bd222t will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

bd222t will respond to all data rights requests within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it. There is no fee for standard data rights requests.

bd222t is an 18+ only platform. We do not knowingly collect personal data from individuals under the age of 18. Registration on the platform requires confirmation that you are aged 18 or above, and bd222t may request age verification documentation to enforce this requirement. If we become aware that personal data has been collected from a person under 18 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on bd222t, please notify us immediately at [email protected].

The bd222t platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) for the purpose of facilitating transactions. These third-party services operate under their own privacy policies, and bd222t has no responsibility or liability for the content, privacy practices, or data handling of any third-party service. We recommend reviewing the privacy policy of any third-party service you use in connection with your bd222t account. This policy applies solely to data processed directly by bd222t through the bd222t platform.

bd222t reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Where changes are material, we will notify registered members by posting a prominent notice on the platform and, where practicable, by sending a notification to your registered email address prior to the change taking effect. The "Last Updated" date at the top of this document will be revised accordingly. Your continued use of the bd222t platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised policy, you must cease using the platform and contact us to arrange the closure of your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd222t handles your personal data, please contact our Data Protection team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Privacy & Data Enquiries: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" or "Data Rights" in your email subject for faster routing.
• Live Chat: Available 24/7 via the bd222t platform for general queries.
• Response Time: Privacy and data rights requests are responded to within 30 days of receipt.