bdt223 Privacy Policy

01 Introduction

bdt223 ("we", "us", "our") operates the online gaming and sports betting platform accessible at https://bdt223.app and is committed to protecting and respecting the privacy of all registered players and visitors ("you", "your", "the user"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed.

This policy applies to all personal data collected through the bdt223 website, mobile-optimised platform, customer support channels, and any related communications between you and bdt223. It covers data collected during account registration, during gameplay and betting activity, during financial transactions, and during any contact with our customer support team.

bdt223 is committed to handling your personal data lawfully, fairly, and transparently. We process personal data only for the purposes described in this policy, using the minimum amount of data necessary to achieve those purposes. We do not engage in profiling for commercial third-party advertising purposes, and we do not sell personal data.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the contractual relationship between you and bdt223.

02 Data We Collect

bdt223 collects personal data through several distinct channels and for clearly defined purposes. The categories of personal data we may collect about you include the following:

2.1 Account Registration Data

When you create a bdt223 account, we collect: your full legal name, date of birth, residential address (including city, district, and postcode), email address, mobile phone number, and the username and password you choose for your account. This data is required to create and manage your account and to verify your identity.

2.2 KYC Verification Data

As part of our Know Your Customer (KYC) process — which is a legal obligation under anti-money laundering regulations — we may collect copies of identity documents such as your National Identity Card (NID), passport, or birth certificate. We may also collect proof of address documents such as utility bills or bank statements, and in certain circumstances, proof of source of funds. KYC documents are processed and stored with enhanced security controls.

2.3 Financial Transaction Data

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, we collect the payment method identifier (such as your mobile wallet number or bank account reference), the transaction amount in BDT, the transaction date and time, and the transaction reference number assigned by the payment provider. We do not store full payment card numbers or full bank account numbers.

2.4 Gaming and Betting Activity Data

We collect records of all gaming and betting activity conducted via your bdt223 account, including: the games or markets accessed, bets placed (including stake, odds, and selection), game rounds played, session durations, responsible gaming tool usage, and account balance history. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

2.5 Technical and Device Data

When you access the bdt223 platform, our servers automatically collect certain technical information including: your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, time zone, the URLs you navigate from and to within the platform, and session timestamps. This data is used for platform security, fraud detection, and aggregate analytics.

2.6 Customer Support Communications

If you contact bdt223's customer support team via live chat or email, we retain records of those communications, including the content of messages exchanged, the date and time of contact, and any resolution outcomes. These records are kept for quality assurance, training, and dispute resolution purposes.

03 How We Use Your Data

bdt223 uses the personal data we collect for the following specific purposes:

bdt223 does not use your personal data for unsolicited third-party marketing, behavioural advertising profiling, or any purpose not listed in the table above without first obtaining your explicit consent.

04 Legal Basis for Processing

Every processing activity carried out by bdt223 rests on one or more of the following legal bases:

• Contractual necessity: Processing your account registration data, payment data, and gaming activity data is necessary to perform the contract between you and bdt223 — namely, to provide you with the online gaming and sports betting services you have signed up for.
• Legal obligation: Processing KYC data, transaction records, and certain gaming activity data is required by applicable anti-money laundering laws and financial regulations. bdt223 is legally obligated to conduct customer due diligence and to retain certain records for a minimum period prescribed by law.
• Legitimate interests: Processing technical and device data for fraud detection, platform security, and aggregate analytics is carried out on the basis of bdt223's legitimate interest in maintaining a secure, fair, and operationally stable platform for all users. These processing activities do not override your fundamental rights and freedoms.
• Consent: Where bdt223 processes your data for purposes beyond those listed above — such as sending promotional communications — we will first obtain your explicit, freely given, and informed consent. You may withdraw consent at any time by contacting our support team.

05 Data Sharing & Disclosure

bdt223 shares personal data with third parties only where strictly necessary and under the following controlled circumstances:

5.1 Payment Processing Partners

To process deposits and withdrawals, bdt223 shares the minimum necessary transaction data with our integrated payment processing partners including bKash, Nagad, Rocket, Upay, and partner banks. These partners receive only the data required to authenticate and complete the specific financial transaction. All payment partners are bound by their own data protection obligations and industry security standards.

5.2 KYC and Identity Verification Services

To fulfil our anti-money laundering obligations, bdt223 may use third-party identity verification service providers to validate the authenticity of KYC documents you submit. These providers are contractually prohibited from using your data for any purpose other than the specific verification task assigned by bdt223.

5.3 Game Studio Providers

When you play games hosted by third-party game studios — such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Ezugi — certain technical session data (such as a session token and player identifier) is shared with those providers solely for the purpose of delivering the game experience. Game studios do not receive your full personal profile, KYC data, or payment information.

5.4 Legal and Regulatory Authorities

bdt223 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or legitimate regulatory request. Any such disclosure will be limited to the data specifically required by the relevant authority and will not exceed what is legally mandated.

5.5 Business Transfers

In the event that bdt223 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by bdt223 may be transferred to the acquiring entity as part of that transaction. In such circumstances, affected players will be notified prior to any transfer, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

06 Cookies & Tracking Technologies

bdt223 uses cookies and similar local storage technologies on the platform. Cookies are small text files placed on your device that allow the platform to recognise your browser across sessions, maintain your login state, and deliver a consistent user experience. The following table describes the categories of cookies used by bdt223:

bdt223 does not use advertising cookies, remarketing pixels, or third-party social media tracking technologies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging into the platform.

07 Data Retention

bdt223 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or for the period required by applicable legal, regulatory, or contractual obligations, whichever is longer. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is either permanently deleted from bdt223 systems or irreversibly anonymised such that it can no longer be attributed to any identifiable individual.

08 Data Security

bdt223 implements a layered security architecture to protect personal data against unauthorised access, loss, destruction, or alteration. The technical and organisational measures we maintain include:

• Transport Layer Security (TLS): All data in transit between your device and bdt223 servers is encrypted using TLS 1.2 or higher. Unencrypted HTTP connections are not accepted for any authenticated session.
• Encryption at rest: Sensitive data fields stored on bdt223 servers — including identity document files, payment method references, and account credentials — are encrypted using industry-standard symmetric encryption. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to personal data within bdt223's internal systems is governed by role-based access control (RBAC). Staff members can only access the specific data categories required for their operational responsibilities. All internal access is logged and audited.
• Two-factor authentication (2FA): bdt223 supports and encourages the use of 2FA for player accounts. All internal staff accounts with access to personal data are required to use 2FA.
• Intrusion detection: bdt223 maintains automated intrusion detection systems that monitor for anomalous access patterns, brute-force attempts, and other indicators of compromise. Security events are reviewed by the operations team on a continuous basis.
• Data breach response: In the event of a confirmed personal data breach that is likely to result in risk to affected individuals, bdt223 will notify the affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

09 Your Rights

As a bdt223 player, you have the following rights with respect to the personal data we hold about you. These rights can be exercised at any time by contacting the bdt223 support team via live chat or by sending a written request to [email protected] (plain text — not a link):

• Right of access: You have the right to request a copy of all personal data that bdt223 holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure ("right to be forgotten"): In certain circumstances, you have the right to request that bdt223 delete your personal data. This right is subject to overriding legal obligations — for example, we are required by AML law to retain transaction records for five years after account closure and cannot delete them at a player's request during that period.
• Right to restriction of processing: You may request that bdt223 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where bdt223 relies on legitimate interests as the legal basis for that processing. bdt223 will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where bdt223 processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

All data rights requests will be processed free of charge. We may ask you to verify your identity before actioning a request in order to ensure we do not disclose data to or action requests from unauthorised persons. We will respond to all requests within 30 days; if a request is particularly complex, we may extend this period by a further 30 days with notification to you.

10 Children's Privacy

The bdt223 platform is strictly intended for adults aged 18 and above. bdt223 does not knowingly collect, process, or store any personal data from individuals under the age of 18. If you are under 18, you must not register an account or use the bdt223 platform in any capacity.

If bdt223 becomes aware that personal data has been collected from a person under the age of 18, we will immediately suspend the relevant account, delete the associated personal data as promptly as possible (subject to any overriding legal retention obligations), and void any gaming or betting activity conducted during the underage access period.

If you are a parent or guardian and believe that a minor in your care has created a bdt223 account or accessed the platform, please contact our support team immediately via live chat (available 24/7 through the account dashboard). We take underage access seriously and will act swiftly on any such report.

11 Third-Party Services & Links

The bdt223 platform integrates services provided by third-party game studios and payment technology partners as described in Section 5 of this policy. Each of these third-party providers operates under its own privacy policy and is independently responsible for its data protection practices. bdt223 is not responsible for the privacy practices of third-party game studios or payment processors beyond the contractual data-processing agreements we have in place with them.

The bdt223 platform does not contain links to external third-party websites for browsing or commercial purposes. All navigation links on the platform lead to pages within the bdt223 domain. In the event that any outbound reference is displayed for informational purposes, bdt223 has no control over the content or privacy practices of those external destinations and accepts no responsibility for them.

12 Changes to This Privacy Policy

bdt223 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. When material changes are made to this policy, bdt223 will:

• Update the "Last Updated" date displayed at the top of this page and in the version bar;
• Display a prominent notification on the bdt223 platform for a reasonable period following the change;
• Where the change significantly affects how we process your personal data, notify registered players by email at the address registered with their account.

Your continued use of the bdt223 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with the updated policy, you must discontinue use of the platform and may request account closure and withdrawal of any available balance.

We recommend bookmarking this page and reviewing the Privacy Policy periodically. The current version number and effective date are always displayed in the version bar at the top of the policy body.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdt223 processes your personal data, please contact our dedicated support team using the details below. All contact information is provided as plain text only and is not a clickable link.

When submitting a privacy-related inquiry or a data rights request, please include your registered account username and a description of your request. For data erasure or portability requests, we may ask you to complete an identity verification step before we can process your request. This step is in place to protect you — it ensures we only action data requests from the verified account holder.