BD22 Privacy Policy

1. Introduction

BD22 ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy applies to all personal data collected through the BD22 website, mobile app, and any other channel through which you interact with BD22 — including customer support, email communications, and promotional activities.

We understand that Bangladeshi players value their privacy and want to know exactly how their information is being handled. That is why we have written this policy in plain, straightforward language rather than dense legal text. We want you to feel confident that your personal data is in safe hands when you play at BD22.

This policy should be read alongside the BD22 Terms and Conditions, which govern your use of the platform as a whole. Together, these two documents set out the full framework of your relationship with BD22 as a player.

2. Data We Collect

BD22 collects personal data that is necessary to operate your account, process your transactions, verify your identity, and provide you with a safe and personalised gaming experience. The categories of personal data we collect are set out below.

BD22 only collects data that is genuinely necessary for the purposes listed above. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or responsible gaming obligations.

3. How We Collect Your Data

BD22 collects your personal data through the following channels:

• Direct interactions: Data you provide when registering your BD22 account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical data collected automatically when you access the BD22 platform, including cookies, server logs, and device fingerprinting tools used for security and fraud prevention.
• Payment providers: Transaction confirmation data received from bKash, Nagad, and Rocket when you make a deposit or withdrawal on BD22.
• Identity verification services: Data received from third-party KYC and identity verification providers when we carry out age and identity checks on your account.
• Fraud prevention services: Risk signals and fraud indicators received from third-party fraud detection services that BD22 uses to protect the platform and its players.

4. How We Use Your Data

BD22 uses your personal data for the following purposes. We only use your data in ways that are consistent with the reason it was originally collected.

• To create and manage your BD22 player account, including verifying your identity and age at registration.
• To process your deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate transaction records.
• To verify your identity and comply with our anti-money laundering (AML) and know-your-customer (KYC) obligations.
• To detect, investigate, and prevent fraudulent activity, cheating, and other prohibited conduct on the BD22 platform.
• To personalise your BD22 experience, including recommending games and promotions that may be relevant to your playing history.
• To monitor your gaming activity for responsible gaming purposes and to provide you with tools to manage your play.
• To send you account-related communications, including transaction confirmations, security alerts, and support responses.
• To send you promotional communications about BD22 bonuses and offers, where you have opted in to receive such communications.
• To improve the BD22 platform, including fixing bugs, optimising performance, and developing new features based on player usage patterns.
• To comply with applicable legal and regulatory obligations.

5. Legal Basis for Processing

BD22 processes your personal data on the following legal bases, depending on the specific purpose of the processing:

• Contract performance: Processing that is necessary to operate your BD22 account and fulfil our obligations to you as a player — including account management, payment processing, and customer support.
• Legal obligation: Processing that is required for BD22 to comply with applicable laws and regulations, including AML/KYC requirements and responsible gaming obligations.
• Legitimate interests: Processing carried out for BD22's legitimate business interests, including fraud prevention, platform security, and platform improvement — provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, such as sending you marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Sharing Your Data

BD22 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances, and only to the extent necessary for the specific purpose:

• Payment providers: bKash, Nagad, and Rocket receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to applicable data protection regulations.
• Identity verification providers: Third-party KYC and age verification services receive the identity documents and personal data necessary to complete verification checks on your BD22 account.
• Fraud prevention services: Risk and fraud detection providers receive technical data and behavioural signals to help BD22 identify and prevent fraudulent activity on the platform.
• Game providers: The game studios whose titles are available on BD22 may receive anonymised gameplay data for the purpose of game performance monitoring and improvement. They do not receive your personally identifiable information.
• Legal and regulatory authorities: BD22 will disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of BD22's business or assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections set out in this policy.

All third-party service providers that process personal data on behalf of BD22 are required to handle that data securely and in accordance with applicable data protection laws. BD22 does not permit third-party providers to use your data for their own purposes beyond the specific service they provide to BD22.

7. Data Retention

BD22 retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The general retention periods that apply to different categories of data are as follows:

• Account data: Retained for the duration of your active BD22 account, plus a period of up to 5 years following account closure to comply with legal and regulatory obligations.
• Transaction records: Retained for a minimum of 5 years following the date of the transaction, in accordance with anti-money laundering regulations.
• KYC verification documents: Retained for a minimum of 5 years following account closure or the completion of the verification process, whichever is later.
• Support communications: Retained for up to 3 years following the resolution of the support interaction, for dispute resolution and quality assurance purposes.
• Technical and usage data: Retained for up to 2 years for platform security and performance analysis purposes.

When your personal data is no longer required, BD22 will securely delete or anonymise it so that it can no longer be associated with you as an individual.

8. Data Security

BD22 takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the BD22 platform.
• Encryption of sensitive data at rest in our secure server infrastructure.
• Strict access controls ensuring that only authorised BD22 personnel can access personal data, and only to the extent necessary for their role.
• Regular security audits and penetration testing of the BD22 platform and infrastructure.
• Two-factor authentication options for player accounts to prevent unauthorised access.
• Continuous monitoring of platform activity for signs of unauthorised access or suspicious behaviour.

9. Cookies

BD22 uses cookies and similar tracking technologies to improve the performance and functionality of our platform, personalise your experience, and gather analytics data that helps us understand how players use BD22. The types of cookies we use are as follows:

• Essential cookies: These cookies are necessary for the BD22 platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: These cookies collect anonymised data about how players use BD22 — such as which pages are visited most frequently and whether any errors are encountered. This data helps us improve the platform.
• Functionality cookies: These cookies remember your preferences — such as your preferred language or display settings — so that BD22 can provide a more personalised experience on your next visit.
• Security cookies: These cookies help BD22 detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the BD22 platform. BD22 does not use third-party advertising cookies or share cookie data with advertising networks.

10. Your Privacy Rights

As a BD22 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your request and we will respond within the timeframes set out below.

• Right of access: You have the right to request a copy of the personal data that BD22 holds about you. We will provide this within 30 days of receiving your request.
• Right to rectification: If any of the personal data BD22 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly from your BD22 account dashboard.
• Right to erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. Please note that BD22 may be required to retain certain data for legal and regulatory compliance purposes even after an erasure request.
• Right to restrict processing: You have the right to request that BD22 restricts the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to BD22 in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where BD22 processes your data on the basis of your consent — such as for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11. Minors

BD22 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory part of the BD22 registration process, and we carry out additional checks where we have reason to believe that a player may be under 18.

If BD22 discovers that personal data has been collected from a player who is under 18, we will immediately close the account, delete the personal data, and return any deposited funds to the original payment source. If you believe that a minor has registered an account on BD22, please contact us immediately at [email protected].

12. Changes to This Policy

BD22 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this policy, we will notify registered players via email or an in-platform notification and update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how BD22 is protecting your personal data. Your continued use of BD22 following notification of changes to this policy constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way BD22 handles your personal data, please contact our privacy team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Live Chat: Available 24/7 from your BD22 account dashboard.

When submitting a privacy request, please include your registered email address and a clear description of your request so that we can identify your account and respond efficiently. BD22 will acknowledge all privacy requests within 48 hours and provide a full response within 30 days.