Privacy Policy — How bdt22w Handles Your Data

Full Privacy Policy

The complete legal text governing personal data processing on the bdt22w Platform

1. Personal Data We Collect

1.1 Data You Provide Directly

When you register for a bdt22w Account or use our services, we collect the following categories of personal data that you provide to us directly:

• Identity Data: Full legal name, date of birth, gender, and nationality as provided during account registration or identity verification.
• Contact Data: Mobile phone number, email address, and residential address in Bangladesh (including district and division such as Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi).
• Account Credentials: Username and encrypted password. We never store your password in plain text.
• Verification Documents: Copies of government-issued identification such as Bangladesh National Identity Card (NID), passport, or driving licence, and proof of address documents, submitted as part of our Know Your Customer (KYC) process.
• Payment Data: Mobile wallet identifiers (bKash, Nagad, Rocket, or Upay account numbers) associated with your account. We do not store full payment credentials on our servers; transactions are processed through the payment provider's own secure infrastructure.
• Communications Data: The content of messages you send to bdt22w's support team, including email correspondence, live chat transcripts, and feedback submissions.

1.2 Data Collected Automatically

When you access and use the bdt22w Platform, certain technical and usage data is collected automatically by our systems:

• Device & Technical Data: IP address, device type, operating system version, browser type and version, screen resolution, and mobile network information.
• Session Data: Login timestamps, session duration, pages visited within the Platform, games played, betting activity, and account balance changes.
• Geolocation Data: Country and region-level location data derived from your IP address, used to verify eligibility to access the Platform and to comply with geographic restrictions.
• Cookies and Tracking Technologies: bdt22w uses functional cookies and session tokens to maintain your login state, remember preferences, and improve Platform performance. See Section 9 of this Policy for full details on our cookie use.

1.3 Data Received from Third Parties

bdt22w may receive certain personal data about you from third-party service partners in the course of operating the Platform:

• Payment Providers: Transaction confirmation data, including transaction reference numbers and timestamps, from bKash, Nagad, Rocket, and Upay.
• Identity Verification Partners: Verification outcome data (pass/fail) from third-party KYC service providers used to authenticate identity documents.
• Fraud Prevention Services: Risk scores and fraud signals from third-party fraud detection partners, used to protect both bdt22w and its Players from fraudulent activity.

2. How We Use Your Personal Data

bdt22w processes your personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which we use each category of personal data collected:

3. Legal Basis for Processing

bdt22w processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the bdt22w Terms and Conditions agreement — including account creation, payment processing, and gameplay services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, anti-money laundering, and age verification obligations.
• Legitimate Interests: Processing carried out for bdt22w's legitimate business interests — including fraud prevention, Platform security, and improving our services — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — including the sending of direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

4. Sharing Your Personal Data

4.1 Third-Party Service Providers

bdt22w shares personal data with third-party service providers who assist in operating the Platform. All such providers are bound by contractual data-processing agreements that restrict their use of your data to the specific services they provide to bdt22w. Categories of service providers include:

• Payment processing providers: bKash, Nagad, Rocket, Upay
• Identity verification and KYC providers
• Fraud detection and risk management services
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Email and SMS communication service providers

4.2 Legal Disclosures

bdt22w may disclose your personal data to law enforcement authorities, regulatory bodies, or other third parties where required to do so by applicable law, court order, or where we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of bdt22w, our Players, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bdt22w's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer and the privacy practices of the acquiring entity before your data is transferred and becomes subject to a different privacy policy.

5. International Data Transfers

bdt22w's primary data processing infrastructure is maintained in secure data centres. Some of our third-party service providers may process personal data outside of Bangladesh. Where personal data is transferred internationally, bdt22w ensures that appropriate safeguards are in place — including contractual data protection clauses and security assessments — to maintain a standard of protection equivalent to that provided within Bangladesh.

6. Data Retention

bdt22w retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Active Account Data: Retained for the lifetime of your bdt22w Account and for a period of 5 years following account closure.
• Transaction Records: Retained for a minimum of 5 years following each transaction to comply with financial record-keeping requirements.
• KYC Documents: Retained for 5 years following account closure or the completion of the KYC process, whichever is later.
• Support Correspondence: Retained for 2 years from the date of the most recent communication.
• Marketing Consent Records: Retained for the duration of your Account plus 1 year to demonstrate compliance.
• Anonymised Analytics Data: May be retained indefinitely as it cannot be linked back to any individual.

7. Your Data Protection Rights

As a bdt22w Player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We aim to respond to all verified requests within 30 days.

• Right of Access: You may request a copy of all personal data bdt22w holds about you, together with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a data accuracy dispute is being resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

8. Data Security Measures

bdt22w takes the security of your personal data seriously. We implement the following technical and organisational measures to protect your information against unauthorised access, loss, destruction, or alteration:

• SSL/TLS encryption on all data in transit between your device and bdt22w servers
• Encryption of sensitive data at rest, including identity documents and payment references
• Role-based access controls ensuring only authorised personnel can access personal data
• Regular penetration testing and security vulnerability assessments
• Multi-factor authentication for internal systems access by bdt22w staff
• Comprehensive audit logs of all access to personal data
• Incident response procedures to detect, report, and address data security breaches promptly

9. Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. bdt22w uses cookies and similar tracking technologies to keep the Platform functioning correctly, remember your preferences, and understand how Players use our services so we can continue to improve them.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens that keep you logged in to your bdt22w Account. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings, last visited game categories, and notification preferences.
• Analytics Cookies: Used to collect anonymised information about how Players navigate the Platform — such as most visited pages and session lengths — to help us improve the user experience.
• Marketing Cookies: Used only where you have provided consent, to deliver relevant promotional communications and track the effectiveness of our marketing campaigns.

9.3 Managing Cookies

You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your bdt22w Account. For analytics and marketing cookies, you may also update your preferences from the Account Settings page within the Platform.

10. Children's Privacy

The bdt22w Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated Account, delete all collected data, and — where applicable — reverse any transactions made. If you believe a person under 21 has registered on bdt22w, please contact us at [email protected] immediately.

11. Marketing Communications

With your consent, bdt22w may send you promotional communications about new games, seasonal offers, bonus promotions, and tournament events relevant to the Bangladesh market — including BPL cricket season promotions, Eid special bonuses, and Pohela Boishakh celebrations. These communications may be delivered via email or SMS to your registered contact details.

You may opt out of marketing communications at any time by updating your notification preferences in Account Settings, or by contacting [email protected] with the subject line "Unsubscribe". Opting out of marketing will not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, or security alerts.

12. Changes to This Privacy Policy

bdt22w reserves the right to update this Privacy Policy at any time. Where changes are material — for example, a new category of data collection or a new sharing arrangement — we will notify all registered Players via email or an in-platform notification at least 7 days before the changes take effect. The updated Policy will be published at bdt22w.app/privacy-policy with a revised "Last Updated" date. Continued use of the Platform after any update constitutes acceptance of the revised Policy.

13. Contact & Data Requests

For all privacy-related enquiries, data access requests, consent withdrawals, or complaints, please contact bdt22w using the details below. Note that the email address below is provided as plain text only and is not a clickable link.

We take all privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.