bdg222 Privacy Policy

1 Data Controller

bdg222 is the data controller responsible for the personal data described in this Policy. The Platform is operated by bdg222 and is accessible at bdg222.vip. For all data-related enquiries, you may contact us at [email protected]. We aim to respond to all formal data enquiries within 14 calendar days of receipt.

2 Personal Data We Collect

bdg222 collects personal data through multiple touchpoints on the Platform. The categories of personal data we collect include:

• Registration data: Full name, date of birth, email address, mobile phone number, and residential address provided when creating an account.
• Identity verification data: Copies of government-issued identity documents (e.g., National Identity Card, passport) and proof of address submitted in response to a verification request.
• Financial data: Payment method details including bKash mobile number, Nagad account number, Rocket account reference, Upay account details, and the last four digits of any Visa or Mastercard used for deposits. Full card numbers are never stored on bdg222 servers.
• Transaction data: Records of all deposits, withdrawals, wagers, bonus activations, and account adjustments associated with your account.
• Device and technical data: IP address, browser type and version, operating system, device identifier, time zone, and pages visited on the Platform, collected automatically via server logs and cookies.
• Communications data: The content of any messages exchanged with the bdg222 support team via live chat or email, including timestamps and issue references.
• Responsible gaming data: Records of deposit limits, cooling-off periods, self-exclusion requests, and session time settings activated on your account.

We do not intentionally collect sensitive personal data (e.g., health information, political opinions, religious beliefs) and request that you do not include such information in communications with us.

3 How We Use Your Personal Data

bdg222 processes your personal data for the following purposes:

4 Legal Basis for Processing

Where bdg222 processes your personal data, it does so on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between you and bdg222, including account creation, payment processing, and game delivery.
• Legitimate interests: Processing necessary for the Platform's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights.
• Legal obligation: Processing required to comply with applicable law, including anti-money-laundering regulations and identity verification requirements.
• Consent: Where you have provided explicit consent, for example to receive promotional communications. You may withdraw consent at any time by contacting [email protected].

5 Cookies & Tracking Technologies

bdg222 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function correctly, including session authentication, shopping cart state, and security tokens. These cannot be disabled without impairing Platform functionality.
• Performance cookies: Collect anonymised statistical data about how players navigate the Platform (e.g., pages visited, time on page) to help us improve the user experience.
• Functional cookies: Remember your preferences such as language, currency display, and notification settings to deliver a personalised experience.
• Analytics cookies: Used to analyse aggregate traffic patterns and identify technical issues. Data collected through analytics cookies is not linked to individual player identities.

You may manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use the Platform. bdg222 does not use third-party advertising or retargeting cookies.

6 Sharing of Personal Data

bdg222 does not sell or rent your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to confidentiality obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and their processing intermediaries, to the extent required to execute your financial transactions.
• Identity verification partners: Third-party KYC service providers who assist with document verification and age confirmation, operating under data processing agreements with bdg222.
• Game studios and content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and similar studios may receive a pseudonymous player identifier and session data required to operate their games within the bdg222 Platform. They do not receive your full name, contact details, or financial data.
• IT infrastructure and hosting providers: Cloud and server infrastructure partners who provide secure hosting of the Platform under strict data processing agreements.
• Law enforcement and regulators: Where required by a valid court order, law enforcement request, or regulatory obligation. bdg222 will notify you of any such disclosure where legally permitted to do so.

All third parties with whom bdg222 shares personal data are contractually required to maintain appropriate technical and organisational security measures and to use the data only for the purposes specified by bdg222.

7 Data Retention

Personal data is retained for as long as your account is active and for a period following account closure as required by applicable law and our legitimate business interests. Specific retention periods include:

• Account and identity verification data: Retained for a minimum of five years following account closure to comply with anti-money-laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five years following the date of each transaction.
• Support communications: Retained for up to three years following resolution of the relevant support case.
• Device and technical logs: Retained for up to 12 months and then anonymised or deleted.
• Responsible gaming records: Retained for the duration of the account and for five years following any self-exclusion request, to prevent re-registration during an exclusion period.

At the end of each retention period, data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.

8 Data Security

bdg222 applies a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and our servers.
• Cryptographic hashing of account passwords; plain-text passwords are never stored.
• Role-based access controls restricting staff access to personal data on a strict need-to-know basis.
• Regular security audits and vulnerability assessments of the Platform's infrastructure.
• Secure, access-controlled data centres with physical security measures in place.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, bdg222 will notify affected players and relevant authorities without undue delay and in accordance with applicable law.

9 Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by bdg222:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where there is no compelling legal reason for its continued processing. Note that certain data must be retained to comply with legal obligations even after account closure.
• Right to restriction: Request that we restrict processing of your personal data in certain circumstances, such as while a dispute is being resolved.
• Right to object: Object to processing based on legitimate interests, including direct marketing if applicable.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to data portability: Request a copy of personal data you provided to us in a structured, commonly used, machine-readable format.

To exercise any of these rights, please contact us in writing at [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond within 14 calendar days of receiving a valid request. We may need to verify your identity before acting on a request.

10 Children & Age Restriction

The bdg222 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you believe that a person under 21 has provided personal data to bdg222, please contact us immediately at [email protected]. Upon confirmation, we will delete the data and close the associated account without delay.

Age verification is conducted as part of the standard account registration and KYC process. Accounts where age cannot be confirmed will be suspended pending receipt of satisfactory identity documentation.

11 Marketing Communications

With your consent, bdg222 may send you promotional communications about new games, bonus offers, seasonal promotions (such as Eid, Pohela Boishakh, BPL season promotions, and T20 World Cup specials), and platform updates via the contact details you provided at registration.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email.
• Updating your notification preferences within your account settings.
• Contacting [email protected] with the subject line "Marketing Opt-Out — [Your Username]".

Opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, or responses to support queries.

12 International Data Transfers

The bdg222 Platform is operated with infrastructure that may involve processing personal data in jurisdictions outside Bangladesh. Where personal data is transferred internationally, bdg222 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to the protections described in this Policy. These safeguards include contractual clauses with data processors and technical security measures applicable in the destination jurisdiction.

13 Links to Third-Party Services

The bdg222 Platform integrates third-party game content from studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you interact with these games, certain technical session data is transmitted to the relevant studio's servers as required to operate the game. bdg222 is not responsible for the privacy practices of third-party game studios, and we encourage you to review their respective privacy policies if you have questions about how your data is handled within their game environments.

14 Changes to This Privacy Policy

bdg222 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable law. When material changes are made, we will notify registered players via the Platform notification centre or by email to the registered address at least 7 days before the revised Policy takes effect.

The most recent revision date is shown at the top of this Policy. Continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, please contact [email protected] to request account closure before the effective date.

15 Contact Us

For all privacy-related enquiries, data rights requests, or concerns about how bdg222 handles your personal data, please contact us using the details below. All communications are handled confidentially by the bdg222 data team.

• Email: [email protected]
• Subject line for data requests: "Data Rights Request — [Your Username]"
• Operating Hours: 24/7 — Bangladesh Standard Time (UTC+6)
• Response Target: Within 14 calendar days of receipt of a valid request

Please note that the email address above is displayed as plain text and is not a clickable link. To contact us, copy the address manually into your email client.