bde22 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how bde22 ("we", "us", "our", "the Company") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the bde22 platform at https://bde22.io (the "Platform"). This Policy forms an integral part of the bde22 Terms & Conditions and should be read in conjunction with that document.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

bde22 is committed to handling personal data with integrity, transparency, and care. We apply the principle of data minimisation — collecting only what is genuinely required to deliver a safe, fair, and reliable online betting service to players across Bangladesh.

2. Who We Are

bde22 is an online betting and gaming platform operating at https://bde22.io, offering sports betting (including cricket, football, kabaddi, and hockey), live casino games, slots, and related entertainment products to eligible players in Bangladesh. The platform is operated by the bde22 team, whose contact details are provided in Section 16 of this Policy.

For the purposes of data protection, bde22 acts as the data controller in respect of personal data collected directly through the Platform. Where personal data is processed by third-party service providers (such as payment processors or identity verification services), those providers act as data processors operating under bde22's instructions and under contractual data protection safeguards.

3. Data We Collect

bde22 collects the following categories of personal data from players. The table below summarises each category, the specific data types involved, and the primary reason for collection.

bde22 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data unless specifically required by applicable law and with your explicit consent.

4. How We Collect Data

bde22 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or responding to a survey or promotion.
• Automated technologies: Technical and usage data collected automatically when you interact with the Platform, including through cookies, server logs, and similar tracking technologies as described in Section 10.
• Third-party sources: Identity and fraud-check data received from KYC verification service providers and payment processors, where you have authorised such sharing as part of the verification process.
• Public sources: Publicly available information such as electoral registers or fraud-prevention databases, where permitted by applicable law, for the purpose of verifying identity or preventing financial crime.

5. Purposes & Legal Basis for Processing

bde22 processes your personal data for the following purposes, each of which rests on a defined legal basis:

• Account management and service delivery: Processing is necessary for the performance of a contract between you and bde22 — specifically, providing the betting and gaming services you have signed up for.
• Identity and age verification (KYC): Processing is necessary to comply with legal obligations, including anti-money-laundering (AML) requirements and age verification (21+) obligations.
• Payment processing: Processing is necessary for the performance of the contract and for compliance with financial regulations.
• Fraud prevention and platform security: Processing is based on bde22's legitimate interest in maintaining a safe and secure platform and preventing financial crime that could harm other players and the Company.
• Responsible gaming monitoring: Processing is based on bde22's legal and ethical obligations to identify and assist players who may be experiencing gambling-related harm.
• Customer support and complaint handling: Processing is necessary for the performance of the contract and for bde22's legitimate interest in resolving disputes fairly and improving service quality.
• Platform analytics and improvement: Processing is based on bde22's legitimate interest in understanding how the Platform is used so that it can be improved for all players, provided such interest is not overridden by your privacy rights.
• Marketing and promotional communications: Processing is based on your consent, which you may withdraw at any time as described in Section 13.

6. Sharing Your Personal Data

bde22 does not sell, rent, or trade your personal data. We share personal data only in the following controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the financial data necessary to process your transactions. These partners operate under their own privacy policies and applicable financial regulations.
• Identity verification providers: Third-party KYC and AML service providers receive identity documents and data solely for the purpose of verifying your identity and checking against fraud and sanctions databases.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session data necessary to deliver their gaming products. No personally identifiable information beyond a player session token is shared with game providers.
• IT and infrastructure providers: Cloud hosting and platform infrastructure partners who store and process data on bde22's behalf under strict data processing agreements that prohibit any independent use of your data.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory authority, bde22 may disclose personal data to law enforcement, financial intelligence units, or other government bodies.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of the Company's assets, player data may be transferred to the successor entity, subject to equivalent privacy protections. Players will be notified of any such transfer in advance.

All third-party data processors engaged by bde22 are contractually bound to process personal data only on bde22's documented instructions, to maintain appropriate security measures, and to delete or return data upon termination of the service relationship.

7. International Data Transfers

The bde22 Platform primarily serves players in Bangladesh, and we aim to store personal data within the region wherever practicable. However, some of our third-party service providers — in particular, game software providers and cloud infrastructure partners — may process data in data centres located outside Bangladesh. Where such transfers occur, bde22 ensures that appropriate safeguards are in place, including contractual obligations requiring the receiving party to apply data protection standards equivalent to those described in this Policy. By using the Platform, you acknowledge and consent to such cross-border data transfers where necessary for the delivery of the service.

8. Data Security

bde22 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmissions between your device and the Platform.
• Encryption of sensitive data fields (including identity documents and payment details) at rest using AES-256 standard encryption.
• Role-based access controls ensuring that only authorised bde22 personnel with a legitimate operational need can access personal data.
• Regular security assessments, vulnerability scans, and penetration testing of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Automated intrusion detection and anomaly monitoring systems that flag suspicious activity in real time.
• Incident response procedures that ensure you are notified promptly in the event of a data breach that poses a risk to your rights and interests.

While bde22 takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for keeping your account password confidential and for using secure network connections when accessing the Platform.

9. Data Retention

bde22 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, in compliance with anti-money-laundering regulations.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction in accordance with applicable financial record-keeping requirements.
• KYC verification documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for three years from the date of the last interaction, for dispute resolution and quality-assurance purposes.
• Technical and usage data: Aggregated usage analytics are retained indefinitely in anonymised form. Individual-level technical data (IP addresses, session logs) is retained for up to 12 months.
• Marketing consent records: Retained for the duration of your account and for two years following withdrawal of consent, to demonstrate compliance with applicable marketing regulations.

10. Cookies & Tracking Technologies

bde22 uses cookies and similar technologies (local storage, session tokens) to operate the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language settings, preferred payment method, and display preferences, so that you do not have to re-enter them on every visit.
• Analytics cookies: Collect anonymised, aggregate information about how players interact with the Platform (pages visited, time spent, features used). This data is used solely to improve the Platform and is not linked to your personal identity.

bde22 does not use advertising cookies, retargeting pixels, or third-party tracking technologies that monitor your activity across external websites. You may configure your browser to block or delete cookies, but note that disabling strictly necessary cookies will prevent you from logging in and using the Platform.

11. Your Data Rights

As a bde22 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered account username.

• Right of access: You may request a copy of all personal data bde22 holds about you. We will provide a structured, readable response within 30 calendar days of receiving a valid request.
• Right of rectification: If any personal data held about you is inaccurate or incomplete, you may request that it be corrected. We will act on verified correction requests within 14 calendar days.
• Right of erasure ("right to be forgotten"): You may request deletion of your personal data. This right is subject to legal retention obligations — for example, transaction records required under AML law cannot be deleted before the mandatory retention period expires. We will inform you of any limitations that apply to your specific deletion request.
• Right to restrict processing: You may request that bde22 restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to bde22, which you may then transfer to another service provider.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing based on bde22's legitimate interests where you believe your privacy rights override those interests. We will assess each objection on its merits and respond within 30 calendar days.

12. Children & Minors

The bde22 Platform is strictly for individuals aged 21 years or older. bde22 does not knowingly collect or process personal data relating to individuals under the age of 21. If bde22 discovers or has reason to believe that an account has been registered by a person under 21, that account will be immediately suspended, all funds will be frozen pending investigation, and any personal data associated with the account will be deleted as soon as legally permissible.

If you are a parent or guardian and believe that a minor has created an account on the Platform using false information, please contact us immediately at [email protected] so that we can take prompt action.

13. Marketing Communications

bde22 may send you promotional communications — including information about bonuses, free bets, seasonal offers (such as those tied to Eid, Pohela Boishakh, or cricket tournaments like the BPL and T20 World Cup), and new game launches — where you have given your consent to receive such communications during account registration or subsequently through account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in the account settings panel on the Platform.
• Sending a written request to [email protected] with the subject line "Unsubscribe".

Withdrawal of marketing consent does not affect transactional communications, which bde22 must send regardless of your marketing preferences. Transactional communications include deposit confirmations, withdrawal notifications, KYC status updates, and security alerts.

14. Third-Party Links

The bde22 Platform does not contain links to third-party websites for commercial or advertising purposes. Any links that appear within the Platform are limited to the internal navigation structure of bde22. bde22 is not responsible for the privacy practices of any external website and encourages you to review the privacy policies of any third-party service — such as bKash, Nagad, or Rocket — before providing them with personal data.

15. Changes to This Privacy Policy

bde22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. Where a change is material — for example, a change that significantly affects how your personal data is used or shared — bde22 will provide at least 14 days' advance notice via a prominent banner on the Platform and, where possible, by email to your registered contact address.

The effective date at the top of this Policy will be updated whenever a change is made. Continued use of the Platform after the updated Policy takes effect constitutes your acceptance of the revised terms. It is your responsibility to review this Policy periodically. The current version is always available at https://bde22.io/privacy-policy.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bde22 handles your personal data, please contact the bde22 data support team using the details below. All correspondence must be in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request – [Your Account Username]"
• Live Chat: Available 24/7 via the Platform
• Response time: Under 48 hours for data rights enquiries; under 4 hours for general support by email; under 2 minutes via live chat
• Operating hours: 24 hours a day, 7 days a week, 365 days a year
• Time zone: Bangladesh Standard Time (BST, UTC+6)

bde22 takes data privacy seriously and is committed to responding to all privacy-related enquiries promptly, transparently, and in good faith. If you are not satisfied with our response to a data rights request, you may seek further recourse through applicable legal channels in Bangladesh.