bdb22 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bdb22 ("we", "us", "our", "the Company") collects, uses, stores, discloses, and protects personal information about individuals ("you", "Player", "User") who register for or use the bdb22 online casino and sports betting platform available at bdb22.io (the "Platform").

bdb22 is committed to handling your personal data responsibly and in accordance with applicable international data protection principles. We recognise that privacy is a genuine concern for players in Bangladesh and we take every reasonable measure to ensure that your information is processed lawfully, fairly, and transparently.

By accessing the Platform, creating an account, or engaging with any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy is incorporated by reference into the bdb22 Terms & Conditions and should be read alongside that document.

2 Data We Collect

bdb22 collects personal data in the following categories. We collect only what is necessary for the purposes described in Section 4 of this Policy.

bdb22 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is incidentally submitted through a support request or verification document, it will not be stored beyond the purpose for which it was shared.

3 How We Collect Data

bdb22 collects personal data through the following means:

• Direct registration: When you create a bdb22 account, you voluntarily provide identity and contact information via the registration form.
• Account activity: Financial data and usage data are generated automatically as you deposit, wager, withdraw, or interact with features on the Platform.
• Identity verification (KYC): When we request verification documents, you upload identity data directly to our secure document portal.
• Customer support: When you contact our support team by email or live chat, communications data is recorded for quality assurance and dispute resolution purposes.
• Automated technologies: Technical data and usage data are collected automatically via server logs, cookies, and similar tracking technologies each time you visit the Platform. See Section 7 for full details.
• Third-party payment processors: When a transaction is processed via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we receive a transaction confirmation reference from the payment processor. We do not receive or store your full payment credentials directly.

4 How We Use Your Data

bdb22 processes your personal data for the following lawful purposes:

• Account creation and management: To establish, maintain, and secure your bdb22 account, including authentication and account settings.
• Service delivery: To process deposits and withdrawals in BDT, settle bets and casino game outcomes, apply bonuses and promotions, and deliver customer support.
• Identity verification and fraud prevention: To verify that you meet our eligibility criteria (including the 21+ age requirement), detect and prevent fraudulent activity, and comply with anti-money laundering obligations.
• Responsible gaming compliance: To monitor for signs of problem gambling behaviour and apply the responsible gaming tools and restrictions that you or we have activated on your account.
• Legal and regulatory obligations: To comply with applicable laws, respond to lawful requests from authorities, and enforce our Terms & Conditions.
• Platform improvement: To analyse aggregated usage patterns, diagnose technical issues, and improve the performance, security, and content of the bdb22 Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have consented to receive such communications. You may withdraw this consent at any time.
• Dispute resolution: To investigate and resolve complaints, chargeback requests, or other disputes related to your account or transactions.

5 Data Sharing

bdb22 does not sell, rent, or trade your personal data to unaffiliated third parties for their own independent commercial purposes. We may, however, share your data with the following categories of recipients where it is necessary to operate the Platform and deliver our services:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank receive only the minimum data required to process your transaction and confirm its outcome.
• Game providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive session identifiers and account references in order to deliver their game content and record game outcomes. They do not receive your full identity or financial data.
• Identity verification services: Where we use third-party KYC technology to assist with document verification, your identity documents are processed by that provider solely for the purpose of verification on behalf of bdb22.
• IT and hosting infrastructure providers: Servers and related infrastructure services used to host the Platform may be operated by third-party providers. These providers act as data processors under strict contractual obligations and may not use your data for any purpose beyond providing infrastructure services to bdb22.
• Legal and regulatory authorities: bdb22 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bdb22's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

6 Data Retention

bdb22 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention principles apply:

• Active accounts: Personal data associated with an active bdb22 account is retained for the duration of the account relationship plus a minimum of five (5) years following account closure, in order to meet financial record-keeping and anti-money laundering obligations.
• Transaction records: Financial transaction data, including deposit and withdrawal records in BDT, is retained for a minimum of seven (7) years from the date of the transaction.
• KYC documents: Identity verification documents are retained for the duration of the account relationship and for five (5) years after account closure.
• Support communications: Customer support correspondence is retained for three (3) years from the date of the most recent interaction, or for the duration required to resolve any outstanding dispute.
• Technical and usage logs: Server logs and usage data are typically retained for a maximum of twelve (12) months for security and diagnostic purposes, after which they are anonymised or deleted.

When personal data is no longer required and no legal obligation requires its continued retention, bdb22 will securely delete or anonymise that data in a manner that prevents its recovery.

7 Cookies & Tracking Technologies

bdb22 uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform effectively, remember your preferences, maintain session security, and analyse how the Platform is used. The following cookie categories are in use:

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your bdb22 account and using core platform features. Disabling functional or analytics cookies will not affect your ability to place bets or access games.

8 Data Security

bdb22 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the bdb22 servers.
• Encrypted storage of passwords using industry-standard hashing algorithms. bdb22 staff cannot view your password in plain text.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their specific job function.
• Regular internal security reviews and vulnerability assessments of the Platform infrastructure.
• Segregated storage environments that separate production data from development and testing environments.
• Incident response procedures that include player notification in the event of a data breach that is likely to result in a high risk to your rights and interests.

9 Your Rights

As a bdb22 player, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data bdb22 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances, for example while a dispute is being investigated.
• Right to data portability: Where processing is based on your consent or the performance of a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to other forms of processing based on legitimate interests, subject to bdb22's right to demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10 Minors

The bdb22 Platform is strictly intended for individuals aged 21 years and above. bdb22 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If we become aware that personal data belonging to a minor has been submitted to the Platform, we will immediately suspend the associated account, delete all related personal data, and void any associated transactions.

If you are a parent or guardian and you believe that your child has registered on the bdb22 Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11 Third-Party Links

The bdb22 Platform may, from time to time, contain references or links to third-party websites, payment platforms, or game provider portals. This Privacy Policy applies exclusively to data collected by bdb22 through the bdb22.io Platform. bdb22 has no control over the privacy practices of any third-party website and accepts no responsibility for the manner in which those third parties collect, use, or protect your data. We encourage you to review the privacy policies of any third-party service before providing your personal information to them.

12 International Data Transfers

bdb22 operates as an international platform and your personal data may be stored or processed on servers located outside Bangladesh. Where such international transfers occur, bdb22 takes appropriate contractual and technical safeguards to ensure that your data receives a level of protection consistent with the principles set out in this Policy.

Transfers to third-party game providers and payment processors operating internationally are governed by data processing agreements that impose obligations equivalent to those described in this Privacy Policy. By using the bdb22 Platform, you acknowledge and consent to these international data transfers.

13 Changes to This Policy

bdb22 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to the way we collect, use, or share personal data, we will notify registered players by email or through a prominent notice on the Platform prior to the change taking effect.

The "Last updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the bdb22 Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdb22 processes your personal data, please contact our data support team. We are committed to addressing all privacy-related enquiries promptly and transparently.

Email (plain text — not a clickable link): [email protected]

Please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line of your email to ensure your message is routed to the appropriate team. We aim to respond to all data-related enquiries within 30 days of receipt. Support is available 24 hours a day, 7 days a week, including Bangladesh public holidays.