bd3222 Privacy Policy

bd3222 is Bangladesh's leading online casino and sports betting platform, accessible at https://bd3222.app. We are committed to protecting the privacy and personal data of every individual who interacts with our platform — whether as a registered Player, a visitor browsing the site, or a person contacting our support team.

This Privacy Policy sets out in clear, plain English how bd3222 collects personal information, the purposes for which that information is used, the circumstances under which it may be shared with third parties, the security measures we employ to protect it, and the rights you hold in relation to your own data.

This policy applies to all personal data collected through:

• The bd3222 website at https://bd3222.app and all sub-pages.
• The bd3222 mobile application, where available.
• Customer support interactions conducted by email, live chat, or any other channel operated by bd3222.
• Transactional data generated when you make deposits or withdrawals through payment providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard.

This policy should be read alongside the bd3222 Terms & Conditions, which govern your use of the platform. Where there is any conflict between this Privacy Policy and the Terms & Conditions on a matter of data handling, this Privacy Policy shall prevail.

For the purposes of this Privacy Policy, bd3222 acts as the data controller in respect of all personal data collected from Players and visitors using the platform. As data controller, bd3222 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All enquiries relating to data protection, privacy rights, or the contents of this policy should be directed to the bd3222 data protection contact:

When contacting us about a data protection matter, please include your registered username or Account email address and a clear description of your request so that we can verify your identity and respond efficiently.

bd3222 collects personal data in several ways: directly from you when you register an account or contact support, automatically as you use the platform, and indirectly from third-party service providers involved in payment processing and identity verification. The categories of personal data we collect are set out below.

3.1 Registration Data

When you create a bd3222 account, we collect the following information:

• Full legal name
• Date of birth (for age verification purposes)
• Email address
• Mobile phone number
• Residential address (including city, district, and postcode)
• Chosen username and encrypted password
• Preferred currency (Bangladeshi Taka / BDT)

3.2 KYC and Identity Verification Data

To comply with responsible gaming and anti-money-laundering obligations, bd3222 may request and collect:

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bill, bank statement, or similar document dated within three months)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account showing your name)
• Source-of-funds documentation for large transactions

3.3 Financial Transaction Data

When you make a deposit or withdrawal, bd3222 records:

• Transaction amount in BDT (৳)
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Transaction reference number and timestamp
• Masked payment identifier (e.g., last four digits of card number or mobile wallet number)

bd3222 does not store full payment card numbers on its own servers. Card transactions are processed exclusively through PCI-DSS compliant third-party payment gateways.

3.4 Gameplay and Betting Data

• Game session logs including game title, stake amount, outcome, and session duration
• Betting history across sports, cricket, and casino markets
• Bonus usage records and wagering progress
• Win/loss history

3.5 Technical and Device Data

Collected automatically when you access bd3222:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited, links clicked, and navigation path on the platform
• Cookie identifiers (see Section 8)

3.6 Communications Data

• Content of messages sent to bd3222 customer support via email or live chat
• Records of any complaints or disputes raised
• Preferences relating to marketing communications (where applicable)

bd3222 uses the personal data it collects for the following clearly defined purposes:

bd3222 does not use your personal data for any purpose not listed above without first obtaining your explicit consent or establishing a separate lawful basis for that processing.

bd3222 processes your personal data only where a lawful basis exists for that processing. The primary legal bases we rely upon are:

• Contractual Necessity: Processing your registration data, transaction data, and gameplay data is necessary to perform the contract between you and bd3222 — i.e., to provide you with the gaming and betting services you have signed up for.
• Legal Obligation: bd3222 is required to collect and process certain personal data (particularly KYC data and transaction records) to comply with applicable anti-money-laundering obligations, responsible gaming requirements, and other legal duties.
• Legitimate Interests: bd3222 processes technical data and communications data based on its legitimate interests in maintaining platform security, preventing fraud, improving service quality, and resolving disputes. We balance these interests against your privacy rights and will not process your data where your interests override ours.
• Consent: Where bd3222 relies on consent as the basis for processing — for example, in relation to optional marketing communications — we will obtain your clear, affirmative consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bd3222 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below:

6.1 Payment Processors

To process your deposits and withdrawals, bd3222 shares the minimum necessary transactional data with the relevant payment service providers, including bKash, Nagad, Rocket, Upay, and card processing gateways for Visa and Mastercard. These providers process your data strictly for the purpose of executing the payment and are contractually prohibited from using it for any other purpose.

6.2 Identity Verification Providers

Where bd3222 uses third-party KYC or identity verification services to confirm your age and identity, your submitted documents and personal details may be shared with those providers. Such providers operate under strict data processing agreements and are not permitted to retain your data beyond the verification process.

6.3 Technology and Hosting Providers

bd3222's platform is hosted on secure cloud infrastructure. Our hosting and technology partners may have access to personal data stored on the platform solely in the context of providing infrastructure and maintenance services. They do not have independent rights to use your data.

6.4 Game Software Providers

Where you play games powered by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited session and gameplay data may be transmitted to those providers' systems to facilitate game delivery and fairness certification. These providers do not receive your name, address, payment details, or any other directly identifying registration data.

6.5 Legal and Regulatory Authorities

bd3222 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where required to do so by applicable law, a valid legal order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other serious harm.

bd3222 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply as general guidelines:

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an individual. Where legal obligations require retention beyond the periods above, we will retain only the data required by those obligations and delete the remainder.

bd3222 uses cookies — small text files stored on your device — to enable essential platform functionality, maintain the security of your session, and analyse how Players use the platform so that we can improve it over time.

8.1 Types of Cookies Used

8.2 Managing Cookies

You may configure your browser to block or delete cookies at any time. However, please note that disabling essential cookies will impair or prevent your ability to log in to your bd3222 account and use key platform features. Analytics and security cookies may be blocked without affecting your core gaming experience, though doing so may limit our ability to detect and respond to security threats associated with your session.

bd3222 employs a comprehensive range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and bd3222's servers is encrypted using industry-standard TLS protocols. Our platform operates exclusively over HTTPS.
• Password Hashing: Player passwords are never stored in plain text. Passwords are hashed using modern one-way cryptographic algorithms before storage.
• Access Controls: Access to personal data within bd3222's internal systems is restricted on a strict need-to-know basis. Staff who require access to personal data for legitimate business purposes are subject to confidentiality obligations and regular security training.
• Intrusion Detection: bd3222's infrastructure is monitored continuously for signs of unauthorised access, suspicious activity, or data exfiltration attempts.
• PCI-DSS Compliance: Payment card data is handled exclusively through PCI-DSS compliant third-party gateways. bd3222 does not store, process, or transmit raw card numbers on its own servers.
• Regular Security Reviews: bd3222 conducts periodic security assessments of its platform and third-party integrations to identify and remediate vulnerabilities.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, bd3222 will notify affected individuals promptly and take all reasonable steps to contain the breach and mitigate its impact.

As an individual whose personal data is processed by bd3222, you have the following rights in relation to that data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and we will respond within five (5) business days.

• Right of Access: You have the right to request a copy of all personal data bd3222 holds about you, along with information about how it is being used. We will provide this information free of charge in a clear, structured format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that bd3222 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other lawful basis exists for processing. Note that this right is not absolute: we may be required to retain certain data to comply with legal obligations (e.g., financial transaction records).
• Right to Restriction of Processing: You may request that bd3222 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of bd3222's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

bd3222 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. Our registration process includes age verification steps, and we conduct ongoing checks to identify and remove accounts operated by minors.

If bd3222 becomes aware that personal data has been collected from a minor, we will immediately close the associated account, delete all personal data collected, and return any deposits made to the original payment method where technically feasible.

If you are a parent or guardian and believe that your child has registered an account on bd3222, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

The bd3222 platform may contain references to third-party services, game providers, or payment partners. Where links or integrations to third-party services exist, those third parties operate under their own privacy policies and data protection practices, which are entirely independent of this Privacy Policy.

bd3222 is not responsible for the privacy practices of any third-party service, and we encourage you to review the privacy policies of any external service you interact with in connection with your bd3222 account — particularly your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, or Mastercard).

bd3222 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the services we offer. When we make material changes, we will post a notice on the bd3222 platform and update the "Last Updated" date at the top of this page. Where a change is particularly significant — for example, a material change to the types of data we collect or the third parties with whom we share it — we will endeavour to notify registered Players directly by email.

Your continued use of bd3222 following the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd3222 handles your personal data, please contact our data protection team using the details below. We are committed to responding to all privacy enquiries promptly and transparently.

bd3222 takes all privacy complaints seriously. If you submit a formal privacy complaint and are not satisfied with our response, you retain the right to seek independent advice or pursue any remedies available to you under applicable law in Bangladesh.