bcd222 Privacy Policy

Section 1

Information We Collect

1.1 Information you provide directly:
When you register for a bcd222 account, we collect your full legal name, date of birth, mobile phone number, and any additional information required for identity verification. When you contact customer support, we retain records of those communications, including any documents you submit.

1.2 Financial information:
To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, we collect and store your registered mobile wallet number or payment reference. Full card numbers are not stored on bcd222 servers — they are handled exclusively by our PCI-compliant payment partners.

1.3 Technical and usage data:
When you access the platform, we automatically collect your IP address, device type, operating system, browser type and version, session duration, pages visited, and actions taken (such as bets placed, games launched, and deposits initiated). This data is used for security monitoring, fraud detection, platform optimisation, and responsible gaming analytics.

1.4 Cookies and similar technologies:
bcd222 uses session cookies and persistent cookies to maintain login state, remember your preferences, and analyse platform traffic. You may control cookie settings through your browser; however, disabling certain cookies may affect the functionality of the platform. We do not use third-party advertising cookies or cross-site tracking technologies.

Section 2

How We Use Your Information

bcd222 processes your personal data for the following specific purposes:

• Account creation and management: To register, authenticate, and maintain your bcd222 account and associated wallet balance.
• Age and identity verification: To confirm that you are at least 21 years of age and that the information you provided during registration is accurate and genuine.
• Payment processing: To facilitate deposits and withdrawals through your chosen payment method in Bangladeshi Taka (৳).
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multiple-account creation, and other activities that breach our Terms and Conditions.
• Customer support: To respond to your queries, complaints, and requests in a timely and accurate manner.
• Responsible gaming: To monitor account activity for signs of problem gambling and, where appropriate, to apply responsible gaming tools in accordance with our Responsible Gaming Policy.
• Platform improvement: To analyse aggregated, anonymised usage patterns in order to improve the performance, usability, and content of the bcd222 platform.
• Legal and regulatory compliance: To meet any obligations imposed by applicable law, including the retention of financial transaction records.

We do not use your personal data for profiling, personalised advertising to third parties, or any automated decision-making that produces legal effects without human oversight.

Section 3

Legal Basis for Processing

bcd222 processes your personal data on the following legal bases:

Contractual necessity: Processing your account data, identity verification, and payment information is necessary to fulfil the service agreement between you and bcd222.

Legitimate interests: Fraud detection, security monitoring, and platform analytics are carried out in the legitimate interest of bcd222 and its user community, provided those interests are not overridden by your own rights.

Legal obligation: Certain data retention and reporting obligations are imposed by applicable financial and anti-money-laundering regulations, and compliance is mandatory regardless of your consent.

Consent: Where we process data for purposes beyond those listed above (for example, sending you promotional communications), we will obtain your explicit consent in advance. You may withdraw that consent at any time by contacting support.

Section 4

Data Sharing & Third Parties

bcd222 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

4.1 Payment service providers: bKash, Nagad, Rocket, Upay, and card processors receive transaction-specific data strictly necessary to process your requested payment. These providers operate under their own privacy policies and are contractually bound to protect your data.

4.2 Game providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive a pseudonymous player identifier and session data to facilitate game launches, bet settlement, and jackpot processing. No name or contact data is shared with game providers.

4.3 Identity verification services: Third-party identity verification partners receive the documents and information you submit during the KYC process. These partners are contractually required to delete or return verification data once the process is complete.

4.4 Legal and regulatory authorities: Where required by applicable law or in response to a valid legal process, bcd222 may disclose account and transaction data to competent authorities. We will notify you of such requests unless prohibited from doing so by law.

4.5 Business transfers: In the event of a merger, acquisition, or sale of substantially all of bcd222's assets, your personal data may be transferred to the successor entity, subject to the same protections described in this Policy. You will be notified of any such transfer.

Section 5

Data Security

bcd222 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

Encryption in transit: All communications between your device and the bcd222 platform are encrypted using TLS 1.2 or higher. Look for the padlock icon in your browser's address bar when accessing the site.

Encryption at rest: Sensitive data fields — including national ID numbers and payment references — are encrypted at the database level. Passwords are hashed using a strong one-way algorithm with a unique salt per account; they cannot be recovered or read by any member of staff.

Access controls: Internal access to personal data is governed by role-based access controls. Only staff with a documented operational need may access specific categories of data, and all access events are logged.

Security monitoring: Our security systems monitor for unusual login patterns, multiple failed authentication attempts, and other indicators of account compromise around the clock. Suspicious activity triggers automatic account protections and alerts to our security team.

Incident response: In the event of a data breach that materially affects your personal data, bcd222 will notify affected users as promptly as practicable and will take immediate remedial action to contain and address the breach.

Section 6

Data Retention

6.1 Active accounts: Personal data associated with an active bcd222 account is retained for the full duration of the account's active status.

6.2 Closed accounts: Following account closure — whether initiated by you or by bcd222 — personal data is retained for a minimum of five (5) years. This retention period exists to meet our obligations in relation to anti-money-laundering regulations, financial record-keeping, and the resolution of any disputes or investigations that may arise after closure.

6.3 Deletion and anonymisation: Upon expiry of the applicable retention period, personal data is either securely and permanently deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for aggregated statistical purposes.

6.4 Support communications: Records of customer support interactions are retained for three (3) years from the date of the last communication in a given case thread, after which they are deleted.

Section 7

Cookies Policy

bcd222 uses the following categories of cookies:

You can manage or delete cookies at any time through your browser settings. Detailed instructions are available in your browser's help documentation. Note that clearing all cookies will log you out of your current session.

Section 8

Minors & Age Restriction

The bcd222 platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under 21. If you believe that a person under the minimum age has registered an account or provided personal information to bcd222, please contact us immediately at [email protected].

Upon receiving a credible report of underage registration, bcd222 will promptly suspend the account in question, initiate an age verification review, and permanently close the account if the underage status is confirmed. All data collected from a confirmed minor will be securely deleted without delay.

Section 9

International Data Transfers

Some of the third-party service providers bcd222 works with — including certain game providers and technical infrastructure partners — may process data outside Bangladesh. Where such transfers occur, bcd222 ensures that appropriate contractual safeguards are in place, including data processing agreements that require the recipient to protect your data to a standard equivalent to that described in this Policy.

If you wish to obtain further information about the safeguards governing any specific international transfer, please submit a request to [email protected].

Section 10

Changes to This Policy

bcd222 reserves the right to update this Privacy Policy at any time. When material changes are made, the updated Policy will be published at https://bcd222.app/privacy-policy with a revised effective date at the top of the page. Where the changes are significant, we will also notify registered users via a platform notification or, where appropriate, by direct message to your registered contact details.

Your continued use of the bcd222 platform after the publication of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how bcd222 protects your data.