Privacy Policy — bd1222 Data Protection & Your Rights

Privacy at a Glance

Six Core Principles That Guide How We Handle Your Data

The following principles underpin every data-handling decision at bd1222. They do not replace the full policy — please read each section below for the complete picture.

Purpose Limitation

We collect your personal data only for clearly defined, legitimate purposes — account management, payment processing, fraud prevention, responsible gaming, and regulatory compliance. We do not collect data speculatively or sell it to third-party advertisers.

Data Minimisation

We only collect data that is strictly necessary to deliver the service you have requested. We do not ask for information beyond what is required for account verification, payments, and regulatory obligations under applicable anti-money laundering (AML) rules.

Security by Design

All data transmitted to and from bd1222 is protected by industry-standard TLS/SSL encryption. Sensitive data at rest — including financial records and identity documents — is stored using AES-256 encryption in access-controlled, audited server environments.

Your Rights Are Respected

You have the right to access, correct, and request deletion of your personal data at any time. You also have the right to restrict how we process your data and to object to certain uses of it. We honour these rights promptly and without undue delay.

Limited Retention

We keep your personal data only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable law. When data is no longer necessary, it is securely deleted or anonymised in accordance with our data retention schedule.

No Data Selling

bd1222 does not sell, rent, or trade your personal data to any third party for commercial marketing or advertising purposes. Data shared with third parties is limited strictly to what is necessary to provide platform services, and always governed by a data processing agreement.

Section 1

Information We Collect

bd1222 collects personal data in three main ways: directly from you when you register or transact, automatically through your use of the platform, and — where necessary — from trusted third-party verification providers.

When you interact with the bd1222 platform — whether you are registering an account, making a deposit, placing a bet, contacting support, or simply browsing — certain personal data is collected. The categories below describe each type of data, why it is collected, and the legal basis under which we process it.

Data Category	Examples	Collection Point	Legal Basis
Identity Data	Full name, date of birth, NID / passport number, selfie or photo ID scan	Account registration & KYC verification	Contract; legal obligation (AML/KYC regulations)
Contact Data	Email address, Bangladeshi mobile number, city of residence	Account registration & profile settings	Contract; legitimate interest
Financial Data	bKash / Nagad / Rocket / Upay account reference, Visa/Mastercard last four digits, transaction history, deposit and withdrawal amounts in ৳ BDT	Cashier / payment processing	Contract; legal obligation
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, session duration, login timestamps	Automatic — platform usage	Legitimate interest (security & fraud prevention)
Gameplay Data	Games played, bet amounts, wagering history, win/loss records, bonus usage, game session logs	Automatic — platform activity	Contract; legitimate interest (responsible gaming monitoring)
Communication Data	Live chat transcripts, support ticket content, email correspondence, survey responses	Customer support interactions	Legitimate interest; consent
Marketing Preferences	Email / SMS opt-in status, preferred language (English), promotional communication history	Registration form; account settings	Consent

bd1222 does not knowingly collect or process special categories of sensitive personal data (such as health data, biometric data, or political opinions) unless specifically required to do so under applicable law or with your explicit consent for a defined purpose such as responsible gaming self-assessment.

Section 2

How We Use Your Data

We process your personal data for specific, documented purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected, and we do not profile you for commercial advertising purposes.

Account Management: To create, manage, and maintain your bd1222 player account; to process your registration details, verify your identity, and provide you with access to the platform's games, betting markets, and cashier facilities.
Payment Processing: To process deposits and withdrawals via your chosen payment methods (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer), to verify payment ownership, and to maintain accurate financial records of all transactions in ৳ BDT.
Fraud Prevention & Security: To detect, investigate, and prevent fraud, money laundering, account takeover, and other unauthorised or illegal activity. This includes automated monitoring of gameplay patterns, transaction behaviour, and login activity.
Responsible Gaming: To monitor gameplay for signs of problem gambling behaviour, to enforce self-exclusion and cool-off periods you have requested, to apply deposit and loss limits you have set, and to comply with our responsible gaming obligations.
Customer Support: To respond to your queries, complaints, and support requests via Live Chat, email, or any other support channel you use to contact us. Support communications are recorded and retained to ensure quality and resolve disputes.
Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), Know Your Customer (KYC), and other regulatory requirements. This may include retaining transaction and identity records for defined periods as required by law.
Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, usability, and content of the bd1222 platform. Individual player data is not used for this purpose without anonymisation.
Marketing Communications (with consent only): To send you promotional emails, SMS notifications, and bonus offers where you have explicitly opted in to receive marketing communications from bd1222. You may withdraw this consent at any time through your account settings.

bd1222 does not make automated decisions that produce significant legal effects on your account without the involvement of a human reviewer. Where automated systems flag an account for review, a trained member of the bd1222 compliance or support team will assess the case before any account action is taken.

Section 3

Data Sharing & Disclosure

bd1222 does not sell your personal data. We share it only with the limited categories of third parties described here, and only to the extent necessary to deliver the services you use.

In the course of operating the bd1222 platform, we work with a number of trusted third-party service providers and technology partners. Where these partners process your personal data on our behalf, they do so strictly under a data processing agreement that limits their use of your data to the specific purpose for which it was shared.

Payment Processors

We share necessary financial data with payment providers including bKash, Nagad, Rocket, Upay, and card processing networks to facilitate deposits and withdrawals. These providers operate their own privacy policies, which we encourage you to review.

Identity Verification Providers

To fulfil KYC requirements, we may share your identity documents and personal details with accredited identity verification service providers. These providers process your data solely for the purpose of confirming your identity and age.

Game Content Providers

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your player session data (such as player ID and bet history) in order to power the game experience and settle game outcomes correctly.

Regulatory & Law Enforcement Bodies

We may be required by law to disclose your personal data to regulatory authorities, law enforcement agencies, or courts. In such cases, we will disclose only the minimum data required and will notify you where we are legally permitted to do so.

If bd1222 is involved in a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and given the opportunity to exercise your data rights before the transfer takes effect.

Section 4

Cookies & Tracking Technologies

bd1222 uses cookies and similar technologies to operate the platform, maintain session security, and understand how players interact with the site. This section explains what cookies we use and how you can control them.

A cookie is a small text file placed on your device by the bd1222 website. Cookies allow the platform to recognise your device between sessions, remember your login state, and maintain the security of your account. The following table describes the categories of cookies we use.

Cookie Type	Purpose	Duration	Can Be Disabled?
Strictly Necessary	Session management, login authentication, security tokens, CSRF protection	Session (deleted on browser close)	No — required for the platform to function
Functional	Remembering your language preference (English), interface settings, and game layout choices	Up to 12 months	Yes — via browser settings (may affect usability)
Analytical	Aggregated, anonymised page-view data to help us improve site performance and content relevance	Up to 24 months	Yes — via browser settings or opt-out
Security & Fraud Detection	Device fingerprinting and session anomaly detection to prevent account takeover and fraud	Up to 90 days	No — required for account security

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary or security cookies may prevent you from logging in to your bd1222 account or using certain platform features. bd1222 does not use third-party advertising or retargeting cookies.

Section 5

Data Security & Storage

bd1222 implements layered technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure.

TLS/SSL Encryption in Transit

All data exchanged between your browser or mobile device and the bd1222 platform is encrypted using TLS 1.2 or higher. This prevents interception by third parties during transmission over public or private networks.

AES-256 Encryption at Rest

Sensitive data stored in bd1222's databases — including identity documents, financial records, and KYC data — is encrypted at rest using AES-256, the same encryption standard used by international financial institutions.

Access Controls

Access to personal data within bd1222's systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement may access identifiable player data, and all access is logged and audited.

Incident Response

In the event of a data security incident that affects your personal data, bd1222 will notify affected players without undue delay and take immediate steps to contain the breach, assess the risk, and prevent recurrence.

While bd1222 applies robust technical safeguards, no online platform can guarantee absolute security. You also play an important role in protecting your data. We strongly encourage you to use a strong, unique password for your bd1222 account, enable two-factor authentication (2FA), and never share your login credentials with anyone. If you suspect your account has been compromised, contact our support team immediately via Live Chat inside your account dashboard.

Section 6

Your Privacy Rights

As a bd1222 player, you have a defined set of rights over the personal data we hold about you. We are committed to honouring these rights fully and without unnecessary delay.

To exercise any of the rights listed here, contact our support team via Live Chat inside your account dashboard or by emailing [email protected].

Right of Access: You have the right to request a copy of all personal data that bd1222 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of receiving your verified request.
Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. You can update basic contact information directly in your account settings, or contact support for more complex corrections.
Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. Please note that this right may be limited where retention is required by law — for example, AML regulations require us to retain certain financial records for a minimum period regardless of account closure.
Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is under review — without requiring full deletion of the data.
Right to Data Portability: Where we process your data on the basis of your consent or a contractual obligation, you have the right to receive that data in a portable format so that you can transmit it to another service provider if you choose to do so.
Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes, which will take effect immediately upon receipt of your objection.
Right to Withdraw Consent: Where we process your personal data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

We aim to respond to all privacy rights requests within 30 calendar days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We will never charge a fee for exercising your privacy rights unless a request is manifestly unfounded or excessive.

Section 7

Data Retention Policy

bd1222 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The schedule below summarises our standard retention periods by data category.

Data Category	Retention Period	Reason for Retention
Account & Identity Data	Duration of account + 5 years after closure	AML / KYC legal obligations; dispute resolution
Financial & Transaction Records	Duration of account + 7 years after last transaction	Accounting obligations; AML regulations; audit trail
Gameplay & Betting History	Duration of account + 3 years after closure	Responsible gaming monitoring; dispute resolution
Support & Communication Records	3 years from date of last communication	Quality assurance; complaint handling; legal claims
Marketing Consent Records	Until consent is withdrawn + 1 year	Proof of consent; regulatory compliance
Technical & Log Data	12 months from collection date	Security monitoring; fraud investigation
Cookie & Session Data	As described in Section 4 (up to 24 months)	Platform functionality; analytics

When a retention period expires, personal data is either securely and permanently deleted or, where deletion is not technically feasible (for example, data held in encrypted backup archives), the data is placed under a processing restriction so that it is not actively used until the archive is overwritten in the normal course of operations.

If you close your bd1222 account, the platform will begin the account data retention period outlined above. Certain data categories must be retained for the legally prescribed minimum period regardless of account status. You will not receive marketing communications after account closure unless you subsequently re-register and opt in again.

Section 8

Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a privacy concern, you can reach our Privacy & Data Protection team through the channels below.

Email Support

For privacy-specific enquiries and data rights requests, contact us at:

[email protected]

Live Chat

Live Chat support is available 24/7 in English inside your bd1222 account dashboard. Our support agents can log privacy requests and escalate them to the data protection team on your behalf.

Response Times

We aim to acknowledge all privacy enquiries within 2 business days and to provide a full response within 30 calendar days. All times are given in Bangladesh Standard Time (BST, UTC+6).

Policy Updates

bd1222 may update this Privacy Policy from time to time. When material changes are made, we will notify registered players by email and display a prominent notice on the platform. Continued use of the platform after the effective date constitutes acceptance of the revised policy.

This Privacy Policy was last reviewed and updated in January 2026. It applies to all players who access bd1222 services, including those accessing the platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations in Bangladesh. If you are accessing the platform from outside Bangladesh, please be aware that data may be processed in jurisdictions with different data protection standards.

Privacy Policy — bd1222