bc222 Privacy Policy
How We Protect Your Personal Data

1 Overview & Data Controller

bc222 is Bangladesh's trusted online betting and casino platform, operated under the bc222 brand and accessible at bc222.io. For the purposes of this Privacy Policy, bc222 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. All data processing activities described in this Policy are carried out by bc222 or by carefully selected third-party processors acting on our documented instructions.

This Privacy Policy governs all personal data that bc222 collects through: your registration and account management activities; your financial transactions including deposits and withdrawals via bKash, Nagad, Rocket, and Upay; your betting and gaming activity across cricket markets, live casino, slots, D&T Ranking, and lottery products; your communications with bc222's customer support team; and your general browsing of the bc222 website.

bc222 is deeply committed to protecting the privacy and security of all players in Bangladesh. We do not sell your personal data to third parties for marketing purposes under any circumstances. We collect only the data that is genuinely necessary to deliver our services, comply with our legal obligations, and ensure a safe gaming environment for every player.

2 Personal Data We Collect

bc222 collects personal data through several distinct channels. The categories of personal data we collect, and the circumstances under which each category is collected, are set out below.

bc222 does not collect or store sensitive personal data beyond what is strictly required for identity verification and anti-money-laundering compliance. We do not collect biometric data, health records, or political opinions. Where National ID card data is collected for KYC purposes, it is processed and stored under strict access controls and is used solely for identity verification.

3 How We Use Your Personal Data

bc222 uses your personal data only for the purposes described in this Policy. We do not use your personal data for any purpose that is incompatible with the purpose for which it was originally collected. The primary purposes for which bc222 processes your personal data are:

• Account creation and management: To register your bc222 account, verify your identity, manage your account settings, and maintain your session security.
• Payment processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfer; to maintain accurate financial records of all transactions in BDT.
• KYC and AML compliance: To verify your age (21+ requirement), confirm your identity, and conduct anti-money-laundering screening as required by applicable legal obligations.
• Service delivery: To provide access to cricket betting markets, live casino games, slots, D&T Ranking, lottery, and all other bc222 platform features.
• Responsible gaming: To monitor your gaming activity for signs of problematic gambling, to enforce deposit limits and self-exclusion orders you have set, and to provide responsible gaming alerts and interventions where appropriate.
• Customer support: To respond to your queries, resolve disputes, and process complaints efficiently and fairly.
• Security and fraud prevention: To detect and prevent fraudulent activity, account takeover attempts, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Platform improvement: To analyse aggregate, anonymised usage data in order to improve the bc222 user experience, optimise game performance, and develop new features.
• Legal obligations: To comply with applicable laws, respond to lawful requests from regulatory and law enforcement authorities, and maintain records required by financial regulation.
• Direct communications: To send you transactional emails and SMS messages related to your account activity, such as deposit confirmations, withdrawal notifications, and KYC status updates. Marketing communications are sent only where you have provided explicit consent, and you may withdraw that consent at any time via your account settings.

4 Legal Basis for Processing

bc222 processes your personal data only where a valid legal basis exists for doing so. The legal bases on which bc222 relies are as follows:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract between you and bc222 — specifically, to register your account, process your bets, and pay out your winnings. Without this data, bc222 cannot deliver its core services to you.
• Legal obligation: bc222 is required by applicable laws to conduct identity verification (KYC), perform anti-money-laundering screening, maintain financial transaction records, and respond to lawful requests from authorities. This processing is mandatory and cannot be opted out of.
• Legitimate interests: bc222 processes certain technical and gaming activity data based on its legitimate interests in preventing fraud, maintaining platform security, and improving the service — provided that these interests are not overridden by your privacy rights. We conduct a balancing assessment before relying on this basis.
• Consent: Where bc222 sends you marketing communications or uses non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, update your preferences in your bc222 account settings or contact support@bc222.io.

5 Sharing Your Personal Data

bc222 may share your personal data with the following categories of recipients:

• Payment service providers: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum financial data necessary to process your transactions. These providers operate under their own privacy policies and regulatory frameworks within Bangladesh.
• KYC and identity verification providers: Third-party verification services may receive your identity documents and personal details strictly for the purpose of conducting identity checks required by our compliance obligations. These providers are bound by strict data processing agreements.
• Game content providers: Where technically necessary for the delivery of live casino games and slots, providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive session identifiers and limited game-session data. They do not receive your financial or full identity data.
• IT and hosting providers: bc222's platform is hosted on secure servers. Our hosting and infrastructure partners may have access to technical data in the course of maintaining platform availability and security.
• Legal and regulatory authorities: bc222 will disclose your personal data to law enforcement, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Professional advisers: bc222's legal counsel, auditors, and compliance consultants may access personal data on a need-to-know basis, under strict confidentiality obligations.

All third-party processors with whom bc222 shares personal data are required to process that data only on bc222's documented instructions, to implement appropriate technical and organisational security measures, and to comply with applicable data protection law.

6 Data Retention

bc222 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, and in any event for as long as your bc222 account remains active. Upon account closure, the following retention periods apply:

After the applicable retention period has expired, bc222 will securely delete or anonymise your personal data so that it can no longer be associated with you. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes. Where you exercise your right to erasure (see Clause 9), bc222 will delete your data within 30 days, subject to any overriding legal retention obligations.

7 Data Security

bc222 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption: All data transmitted between your device and bc222's servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Secure password storage: Your bc222 account password is never stored in plain text. All passwords are processed using a strong, salted hashing algorithm before storage, meaning that even bc222's own technical staff cannot read your password.
• Two-factor authentication (2FA): bc222 offers 2FA via your registered Bangladeshi mobile number as an additional layer of account security. We strongly recommend that all players enable 2FA.
• Access controls: Access to personal data within bc222's internal systems is strictly limited to authorised personnel who require that data to perform their specific job functions. All internal access is logged and audited.
• Regular security audits: bc222 conducts periodic vulnerability assessments and security reviews of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.
• Data minimisation: bc222 collects only the personal data that is genuinely necessary for the specified purpose. Unnecessary data is not collected or retained.
• Incident response: In the event of a data security incident that poses a risk to your rights, bc222 has an incident response procedure in place. Affected users will be notified promptly and given clear guidance on the steps they should take to protect themselves.

While bc222 takes every reasonable precaution to safeguard your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own bc222 account credentials. Never share your password with anyone, and contact support@bc222.io immediately if you suspect that your account has been compromised.

8 Cookies & Tracking Technologies

bc222 uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to enhance your experience, and — where you have provided consent — to analyse usage patterns. A cookie is a small text file stored on your device by your browser when you visit bc222.io.

The types of cookies used by bc222 are as follows:

• Strictly necessary cookies: These cookies are essential for the bc222 platform to function. They maintain your login session, remember your account preferences, and ensure that your betting and gaming activity is correctly recorded. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: With your consent, bc222 uses analytics cookies to collect anonymised data about how players navigate the platform — which pages are most visited, how long sessions last, and where users encounter errors. This information is used exclusively to improve the bc222 experience and is never used to identify individual users.
• Functional cookies: These cookies remember your preferences such as your display settings, your preferred payment method, and your responsible gaming limit configurations, so that you do not need to re-enter these settings on every visit.
• Security cookies: bc222 uses security cookies to detect and prevent fraudulent activity, including CSRF (Cross-Site Request Forgery) protection tokens and session integrity checks.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. However, please be aware that disabling strictly necessary cookies will impair the functionality of the bc222 platform. bc222 does not use third-party advertising cookies or sell behavioural data to advertising networks.

9 Your Rights Over Your Data

As a user of the bc222 platform, you have the following rights in relation to your personal data. bc222 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, contact bc222 at support@bc222.io with your account details and a clear description of the right you wish to exercise.

bc222 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period. bc222 does not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

10 International Data Transfers

bc222 primarily processes your personal data within Bangladesh and within the jurisdictions in which its service providers operate. Where personal data is transferred outside Bangladesh — for example, to servers operated by international game content providers such as Evolution Gaming or Pragmatic Play — bc222 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Such safeguards include contractual clauses in data processing agreements with all international service providers, requiring them to implement technical and organisational security measures at least equivalent to those maintained by bc222 itself. bc222 does not transfer personal data to countries that do not provide an adequate level of data protection without first implementing these contractual safeguards.

If you would like further information about the specific safeguards in place for any particular international data transfer, please contact support@bc222.io.

11 Minors & Age Verification

bc222 takes its obligations regarding the protection of minors extremely seriously. During the registration process, users are required to confirm that they are aged 21 or above. Before processing any withdrawal request, bc222 will verify the user's date of birth against government-issued identity documentation. Any account found to belong to a person under the age of 21 will be immediately closed, all balances forfeited, and the matter referred to appropriate authorities where required by law.

If you believe that a minor has registered a bc222 account or that a minor has access to an account held by an adult, please contact bc222 immediately at support@bc222.io. We will investigate and act swiftly. bc222 also encourages parents and guardians to use parental control software to prevent minors from accessing online gambling platforms.

12 Changes to This Privacy Policy

bc222 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When material changes are made, bc222 will notify all registered players via the email address on file and/or via a prominent notice within the bc222 platform on the player's next login.

The "Last Updated" date at the top of this Policy will always reflect the date on which the most recent version took effect. Your continued use of the bc222 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you must discontinue your use of bc222 and contact support@bc222.io to request account closure before the revised Policy takes effect.

bc222 encourages you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Previous versions of this Policy are available on request by contacting support@bc222.io.

13 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or bc222's data processing practices, please contact bc222's data protection team using the details below. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

For urgent data security concerns — such as suspected unauthorised access to your bc222 account or a potential data breach — please mark your email as urgent and include "URGENT — Security" in the subject line. bc222's security team monitors the support inbox around the clock and will prioritise such requests accordingly.

For general account support queries that are not related to privacy, please also use support@bc222.io or visit our FAQ page for quick answers to common questions.