Privacy Policy — bd322

1 Information We Collect

bd322 collects personal information through several channels: directly from you when you register an account or contact support, automatically when you use the platform, and from third-party verification and payment partners where permitted by law. The categories of personal data we may hold about you are described below.

Registration and Identity Data

When you create a bd322 account, we collect your full legal name, date of birth, residential address (including city and district — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number. This information is required to verify your identity, comply with our Know Your Customer (KYC) obligations, and maintain your account.

Identity Verification Documents

As part of the KYC process, bd322 may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or birth certificate. These documents are processed securely and retained only for as long as required by applicable law.

Financial and Transaction Data

bd322 records details of all deposits, withdrawals, bonuses, and wagers associated with your account. Payment method information — such as the bKash or Nagad mobile number, Rocket account reference, or bank account details associated with your transactions — is stored to facilitate payment processing and to satisfy anti-money laundering (AML) reporting requirements. bd322 does not store full card numbers or banking passwords.

Technical and Usage Data

When you access bd322, we automatically collect certain technical data, including:

• IP address and approximate geolocation (country and city level);
• Device type, operating system version, and browser type;
• Pages visited, session duration, click-path, and feature usage within the platform;
• Referral URL (the website or link that directed you to bd322, if applicable);
• Error and crash logs generated during your session.

This technical data is used to detect fraud, maintain platform stability, improve user experience, and fulfil our security obligations. It is not used to build individual advertising profiles or sold to third-party advertisers.

Communications Data

When you contact bd322 customer support via email or live chat, we retain a record of the conversation — including your contact details and the content of the exchange — for quality assurance, dispute resolution, and training purposes. Support records are retained for a minimum of two years.

2 How We Use Your Data

bd322 processes your personal data only where a lawful basis exists. The primary purposes for which we use your data, and the corresponding legal bases, are set out below.

Marketing Communications

bd322 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and special offers if you have given your explicit consent during registration or through your account communication preferences. You may withdraw this consent at any time by updating your notification settings or by contacting [email protected]. Opting out of marketing communications does not affect your ability to use the platform or receive essential transactional messages relating to your account.

3 Data Sharing & Disclosure

bd322 does not sell, rent, or trade your personal data to any third party for commercial gain. We may share your personal information only in the limited circumstances described below.

Essential Service Providers

bd322 works with a number of carefully selected third-party service providers who process personal data on our behalf in order to deliver the platform. These include payment processing partners (such as the operators of bKash, Nagad, Rocket, and Upay integrations), identity verification providers, cloud hosting and infrastructure providers, customer support software vendors, and game software providers (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe). Each provider is bound by a data processing agreement that restricts their use of your data to the specific service they provide.

Legal and Regulatory Disclosure

bd322 may disclose personal data to law enforcement agencies, financial intelligence units, or other public authorities where we are required to do so by applicable law, a court order, or a regulatory directive. Such disclosures are made without prior notice to the affected player where legally required. bd322 will notify affected players of disclosures where it is legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bd322's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting change to this Privacy Policy prior to the transfer taking effect, and you will have the opportunity to close your account if you do not wish your data to be transferred.

4 Cookies & Tracking Technologies

bd322 uses cookies and similar browser-based technologies (including local storage and session tokens) to operate the platform, remember your preferences, maintain your login session, and gather aggregate analytics about platform performance.

Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language setting, display options, and last-visited game category. These improve your experience but are not required for the platform to operate.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the platform. This data is used exclusively to improve site performance, identify technical issues, and understand feature usage patterns. bd322 uses first-party analytics tools for this purpose and does not share raw session data with third-party analytics vendors.
• Security cookies: Support fraud detection and bot prevention systems. These cookies help bd322 identify and block suspicious activity without impacting legitimate players.

Cookies We Do Not Use

bd322 does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cookies that follow your activity outside of the bd322 platform. We do not integrate Facebook Pixel, Google Ads remarketing tags, or similar ad-network tracking on any page of the platform.

Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific sites. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Detailed instructions for managing cookies in popular browsers are available through your browser's help documentation.

5 Data Retention

bd322 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, and for as long as required by applicable law. Our standard retention periods are as follows:

Where a player requests account closure and there is no legal obligation requiring bd322 to retain their data beyond the periods above, personal data will be securely deleted or anonymised at the end of the applicable retention period. Anonymised aggregate data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

6 Data Security Measures

bd322 takes data security seriously and implements a layered set of technical and organisational measures to protect your personal information against unauthorised access, accidental loss, alteration, and disclosure.

Technical Safeguards

• All data in transit is encrypted using TLS 1.2 or higher (256-bit SSL). Connections on older, insecure protocols are refused.
• Sensitive data fields (including passwords and payment references) are stored in encrypted or hashed form. Plain-text storage of passwords is never used.
• Access to production databases and administrative systems is restricted to authorised personnel only and is controlled through role-based access management with multi-factor authentication.
• bd322 maintains an automated threat detection system that monitors for unusual access patterns, brute-force attempts, and suspicious data queries in real time.
• Regular penetration testing and security audits are conducted to identify and remediate vulnerabilities before they can be exploited.

Organisational Safeguards

• All staff and contractors with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• bd322 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify you as promptly as practicable.
• Third-party service providers are assessed for data security standards before being granted access to bd322 systems or player data.

7 Your Privacy Rights

As a registered player on bd322, you have the following rights in relation to the personal data we hold about you. These rights may be exercised at any time by contacting us at [email protected].

Right of Access

You have the right to request a copy of all personal data that bd322 holds about you. We will provide this information in a structured, commonly used format within 30 days of receiving a valid request. There is no charge for a standard access request.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account registration data, you can update many details directly through your account profile settings. For document-verified data (such as your legal name or date of birth), please contact support.

Right to Erasure

You may request that bd322 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. Please note that bd322 is legally required to retain certain data (particularly financial transaction records and KYC documents) for defined periods regardless of an erasure request. Where we are unable to fulfil an erasure request due to a legal obligation, we will explain the applicable retention requirement.

Right to Restriction

You have the right to request that bd322 restrict the processing of your data in certain circumstances — for example, while we are verifying the accuracy of data you have disputed, or while we are assessing a legitimate interest objection you have raised.

Right to Data Portability

Where bd322 processes your data on the basis of your consent or in performance of a contract, and where processing is carried out by automated means, you have the right to receive a copy of your data in a structured, machine-readable format. You may also request that this data be transferred directly to another controller where technically feasible.

Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, bd322 will cease sending you marketing communications without delay. You can exercise this right through your account notification preferences or by contacting [email protected].

8 Policy Updates & Contact

bd322 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or regulatory guidance. When material changes are made — that is, changes that affect how we collect, use, or share your data in a way that may be relevant to you — we will notify registered players via the email address associated with their account, or via a prominent in-platform notification, at least 14 days before the changes take effect.

The effective date of the current version of this Privacy Policy is displayed at the top of this document. Your continued use of bd322 after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you should cease using the platform and request account closure before the new policy takes effect.

Previous versions of this Privacy Policy are archived and available on request by contacting [email protected].

Contact Details

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data bd322 holds about you, please contact our Data Protection team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject line: Privacy Policy Enquiry
• Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)