bdd22 Privacy Policy

1 Data We Collect

bdd22 collects personal data from you in several ways: directly when you register an account or interact with our services, automatically when you browse our platform, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect are described below.

Registration and Identity Data

When you create a bdd22 account, we collect your full legal name, date of birth, residential address (including city, district, and postal code within Bangladesh), email address, and mobile phone number. This information is required to establish your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.

Identity Verification Documents

As part of our KYC process, we may collect copies of government-issued photo identification documents such as a National Identity Card (NID) or passport, proof of residential address, and evidence of ownership of the payment method you use on the platform. These documents are processed and stored securely in line with applicable data protection standards.

Financial and Transaction Data

bdd22 records all financial transactions conducted through your account, including deposits made via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard; withdrawals; bonus credits; wager amounts; and game outcomes. Payment method details such as mobile wallet numbers and bank account references are stored in tokenised or masked form and are never stored in full plain text on our servers.

Technical and Usage Data

When you access bdd22, we automatically collect technical information including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and click-path data. This information helps us maintain platform security, detect fraudulent activity, and improve the overall user experience.

Communications Data

If you contact bdd22's customer support team via live chat or email, we retain records of those communications — including the content of your messages and any supporting files you submit — for quality assurance, training, and dispute resolution purposes.

2 How We Use Your Data

bdd22 processes your personal data only for specified, explicit, and legitimate purposes. We do not use your data in any manner that is incompatible with the purposes described below.

Where bdd22 relies on your consent as the legal basis for processing, you retain the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent will not affect the lawfulness of any processing that took place before the withdrawal.

3 Data Sharing & Disclosure

bdd22 does not sell or rent your personal data to any third party. We may, however, share your personal data with carefully selected partners and third parties in the following circumstances:

Payment Service Providers

To process your deposits and withdrawals, bdd22 shares the minimum necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, and our banking partners. These providers are contractually bound to process your data solely for the purpose of completing the requested financial transaction and are prohibited from using it for any secondary purpose.

Identity Verification Partners

bdd22 may engage third-party KYC and identity verification service providers to assist in verifying the identity, age, and address of our players. These providers process the identity documents and data you submit during the verification process on our behalf and are subject to strict data processing agreements and security standards.

Technology and Platform Providers

bdd22 works with game studios and technology partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver gaming content. These providers may receive anonymised or pseudonymised session data necessary to operate their game engines securely. They do not receive your full personal profile or financial details.

Regulatory and Law Enforcement Authorities

bdd22 may be required to disclose personal data to regulatory bodies, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where required by applicable law, court order, or regulatory instruction. In such cases, bdd22 will disclose only the minimum data required and will notify the affected player where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bdd22's business assets, personal data held by bdd22 may be transferred to the acquiring entity as part of that transaction. In such circumstances, bdd22 will take reasonable steps to ensure that the acquiring entity provides equivalent data protection standards, and affected players will be notified of the transfer in advance where possible.

4 Cookies & Tracking Technologies

bdd22 uses cookies and similar tracking technologies — including web beacons and local storage objects — to operate and improve our platform. Cookies are small text files placed on your device when you visit a website. They allow us to recognise your device on return visits and to remember your preferences and session state.

Types of Cookies We Use

bdd22 does not use advertising or retargeting cookies and does not share behavioural data with advertising networks or social media platforms for marketing purposes. You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will impair your ability to log in and use core platform features.

5 Data Retention

bdd22 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your account, and to comply with our legal, regulatory, and anti-money laundering (AML) obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, in line with standard AML record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, as required by applicable financial regulations.
• KYC and verification documents: Retained for the duration of your account plus five years following closure, or for such longer period as may be required by a regulatory authority.
• Customer support communications: Retained for three years from the date of the most recent communication in a given thread, unless the communication relates to a dispute that remains unresolved.
• Technical and usage logs: Retained for up to 12 months in identifiable form. After this period, log data is either deleted or aggregated and anonymised for long-term platform analytics.
• Marketing preferences and consent records: Retained for the duration of your account plus two years following account closure, to demonstrate lawful basis for any marketing communications sent.

When the applicable retention period expires, bdd22 will securely delete or anonymise your personal data so that it can no longer be linked back to you as an individual. Secure deletion procedures include cryptographic erasure of stored data and physical destruction or secure wiping of any physical media on which data may have been stored.

6 Security Measures

bdd22 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes the following controls:

• Transport Layer Security (TLS): All data transmitted between your device and bdd22's servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed on a regular basis.
• Data at rest encryption: Personal data stored in bdd22's databases is encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management system with access restricted to authorised personnel only.
• Access controls: Access to personal data within bdd22's internal systems is governed by a role-based access control (RBAC) model. Staff members are granted access only to the data that is necessary for the performance of their specific job function.
• Multi-factor authentication: Internal system access for bdd22 staff requires multi-factor authentication (MFA). We strongly recommend that players also enable 2FA on their own bdd22 accounts for additional protection.
• Regular security audits: bdd22 conducts periodic internal security reviews and works with independent security professionals to assess the robustness of our data protection controls and identify any areas requiring improvement.
• Incident response plan: bdd22 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, we will notify affected players and, where required, relevant authorities, within the timeframes specified by applicable law.

7 Your Privacy Rights

As a player on bdd22, you hold a number of rights in relation to the personal data we hold about you. bdd22 is committed to upholding these rights and to responding to all valid requests promptly. The rights available to you include:

• Right of access: You have the right to request a copy of the personal data bdd22 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Many details can be updated directly within your bdd22 account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw your consent (and no other lawful basis applies), or where the data has been unlawfully processed. This right is subject to any legal retention obligations that require us to keep certain records.
• Right to restriction of processing: In certain circumstances — for example, where you contest the accuracy of the data or have objected to processing — you may request that bdd22 restrict the processing of your data while the matter is resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: Where bdd22 relies on legitimate interests as the basis for processing, you have the right to object to that processing. bdd22 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of these rights, please contact our data protection team by email at: support at bdd22.net with the subject line "Privacy Rights Request". We will acknowledge your request within five business days (Bangladesh Standard Time, UTC+6) and aim to resolve it within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

8 Policy Updates & Contact

bdd22 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or the services we offer. When a material change is made to this Policy, the updated version will be published on this page with a revised effective date prominently displayed at the top of the document.

For significant changes that materially affect how we use your personal data, bdd22 will endeavour to notify registered players via their registered email address or via an in-platform notification prior to the change taking effect. Continued use of the bdd22 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes.

If you have any questions, concerns, or feedback regarding this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 7, please contact the bdd22 data protection team using the details below:

• Email: support at bdd22.net (plain text — not a clickable link)
• Subject line: "Privacy Policy Enquiry" or "Privacy Rights Request"
• Response time: Within 5 business days for general enquiries; within 30 days for formal data rights requests
• Business hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

This Privacy Policy is governed by and construed in accordance with applicable law. The English version of this document is the authoritative version. Any translated versions are provided for convenience only and shall not be relied upon in the event of a dispute or inconsistency.