bct222 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how bct222 ("bct222", "we", "us", "our") collects, uses, stores, discloses, and protects personal information obtained from individuals ("Player", "User", "you") who access or use the bct222 online gaming and sports betting platform at https://bct222.app (the "Platform"). This Policy applies to all personal data processed in connection with your use of the bct222 Services, regardless of the device or method through which the Platform is accessed.

By registering an account, using the Platform, or providing us with any personal data, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the bct222 Terms and Conditions, which are incorporated by reference.

bct222 is committed to handling your personal data responsibly, transparently, and in alignment with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework, where applicable.

2. Who We Are

bct222 is the operator of the online casino and sports betting platform accessible at https://bct222.app. bct222 serves players across Bangladesh and the broader South Asia region, offering cricket betting, live dealer casino games, slots, and related gaming services. For all data protection enquiries, please contact us at [email protected].

3. Categories of Personal Data We Collect

bct222 collects the following categories of personal data from players and prospective players:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, gender, nationality, NID/passport number	Account registration, KYC verification, age verification
Contact Data	Email address, mobile number, residential address, city, postcode	Account communication, support, KYC address verification
Financial Data	bKash/Nagad/Rocket account numbers, bank account details, transaction history, deposit/withdrawal records	Payment processing, fraud prevention, AML compliance
Technical Data	IP address, device type, browser type and version, operating system, time zone, session duration	Platform security, fraud detection, service optimisation
Usage Data	Games played, bet history, win/loss records, session logs, bonus usage	Service delivery, responsible gaming monitoring, personalisation
Communications Data	Support ticket content, live chat transcripts, email correspondence	Customer support, dispute resolution, service improvement
Marketing Preferences	Opt-in/opt-out status, preferred communication channel, promotion redemption history	Targeted marketing (where consented), promotion management

bct222 does not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or biometric data) unless specifically required for KYC compliance purposes under applicable law.

4. How We Collect Your Personal Data

bct222 collects personal data through the following methods:

• Direct Interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to surveys or promotions.
• Automated Technologies: Technical data collected automatically when you access the Platform, including via cookies, server logs, pixel tags, and similar tracking technologies. Please see Section 12 for full details on our cookie practices.
• Third-Party Sources: Identity and address verification data obtained from our KYC partners during the verification process. Fraud scoring data obtained from fraud prevention service providers. Payment confirmation data received from bKash, Nagad, Rocket, and other payment processors.
• Publicly Available Sources: In limited circumstances, bct222 may cross-reference publicly available databases (such as sanctions lists and politically exposed persons registers) as part of our anti-money laundering (AML) obligations.

5. How bct222 Uses Your Personal Data

bct222 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your bct222 player account, including processing deposits, withdrawals, and bonus allocations.
• Identity Verification: Verifying your identity and age to comply with our 18+ policy and to meet KYC obligations before processing withdrawals.
• Service Delivery: Enabling you to participate in casino games, place sports bets, access live dealer tables, and use all features of the bct222 Platform.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfers, and card payments in BDT and INR.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multiple account creation, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling behaviour. Administering self-exclusion requests, deposit limits, session time-outs, and other responsible gaming tools.
• Legal and Regulatory Compliance: Meeting our obligations under applicable law, including responding to lawful requests from regulatory, law enforcement, and financial intelligence authorities.
• Marketing and Promotions: Sending you promotional offers, newsletters, and personalised recommendations where you have provided explicit consent. You may opt out at any time by contacting [email protected].
• Platform Improvement: Analysing aggregated usage data to improve Platform performance, user experience, game selection, and customer support quality.
• Dispute Resolution: Investigating and resolving complaints, disputes, and chargebacks relating to your account activity.

6. Legal Basis for Processing

Where data protection legislation requires a lawful basis for processing, bct222 relies on the following bases:

• Contract Performance: Processing necessary to provide the Services you have requested, including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing necessary for bct222's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your data protection rights.
• Consent: Processing for marketing and promotional communications, which relies on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Personal Data

bct222 does not sell or rent your personal data. We share personal data only in the following limited circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard receive the financial data necessary to process your transactions. Each processor is contractually bound to handle your data securely and use it only for the stated purpose.
• KYC and Identity Verification Providers: Third-party identity verification services receive your identity and address documents to perform verification checks on behalf of bct222.
• Game Content Providers: Software providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may process limited technical data (such as player ID and session data) in order to deliver their games through the bct222 Platform.
• Fraud Prevention Services: Specialist fraud detection providers receive technical and usage data to perform risk scoring and flag suspicious activity.
• Legal and Regulatory Authorities: bct222 may disclose personal data to law enforcement agencies, financial intelligence units, courts, or regulatory bodies where required by a valid legal obligation or court order. bct222 will notify the affected player where legally permissible to do so.
• Business Transfers: In the event of a merger, acquisition, or asset sale involving bct222, personal data held by bct222 may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

8. International Data Transfers

Some of bct222's service providers, including game content providers and payment processors, may be located outside Bangladesh. Where personal data is transferred internationally, bct222 takes steps to ensure that appropriate safeguards are in place, including contractual clauses requiring the recipient to apply data protection standards equivalent to those applied by bct222. By using the bct222 Platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh.

9. Data Retention

bct222 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. The following general retention principles apply:

• Active Account Data: Retained for the duration of your active bct222 account relationship.
• Transaction and Financial Records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with anti-money laundering regulations.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Support Communications: Retained for two (2) years following resolution of the relevant support matter.
• Closed Account Data: Following account closure, bct222 will retain the minimum data required by applicable law and delete all remaining personal data within 12 months of the end of the applicable retention period.

10. Security of Your Personal Data

bct222 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bct222 Platform.
• Bcrypt password hashing with unique per-account salts — passwords are never stored in recoverable form.
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate operational need.
• Regular penetration testing and vulnerability assessments of the Platform infrastructure.
• Encrypted storage of sensitive financial data, including payment method details and transaction records.
• Automated systems for detecting anomalous login attempts, unusual account activity, and potential data breaches.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, bct222 will notify affected players without undue delay and take all reasonable steps to mitigate the impact of the breach.

11. Your Data Protection Rights

As a bct222 player, you have the following rights regarding your personal data, subject to applicable legal limitations:

• Right of Access: You may request a copy of the personal data bct222 holds about you at any time, free of charge, by contacting [email protected]. bct222 will respond within 30 days of receipt of a valid request.
• Right to Rectification: If any personal data bct222 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your bct222 account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been unlawfully processed. This right is subject to bct222's legal retention obligations — certain data must be retained for compliance purposes and cannot be deleted on request.
• Right to Restrict Processing: You may request that bct222 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you provided to bct222 for portability to another service provider, where technically feasible.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time, and to object to processing carried out on the basis of legitimate interests where your rights and interests override those of bct222.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing before the withdrawal.

To exercise any of these rights, please contact the bct222 support team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any data rights request and will respond within 30 calendar days.

12. Cookies and Tracking Technologies

bct222 uses cookies and similar tracking technologies to operate the Platform efficiently, remember your session preferences, analyse Platform performance, and detect fraudulent activity. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing core Platform functionality.
• Analytical and Performance Cookies: Used to measure how players use the Platform, which pages are most visited, and where performance improvements can be made. Data collected is aggregated and anonymised where possible.
• Functional Cookies: Used to remember your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Marketing and Targeting Cookies: Used to deliver relevant promotional content based on your browsing and gaming behaviour. These cookies are only set with your explicit consent.

You may control non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of some areas of the bct222 Platform.

13. Protection of Minors

The bct222 Platform is strictly intended for adults aged 18 years and above. bct222 does not knowingly collect personal data from any person under the age of 18. If bct222 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account permanently closed.

If you believe a minor may have registered an account on the bct222 Platform using false information, please notify us immediately at [email protected]. Parents and guardians concerned about underage gambling are encouraged to use parental control software to restrict access to online gambling platforms.

14. Changes to This Privacy Policy

bct222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. When material changes are made, bct222 will publish the updated Policy on the Platform with a revised effective date. Where practicable, registered players will be notified of significant changes via email or in-platform notification prior to the changes taking effect. Your continued use of the bct222 Platform following the publication of an updated Policy constitutes your acceptance of those changes.

15. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bct222 handles your personal data, please contact us through the following channels:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Platform: https://bct222.app
• Response Time: Within 2 business hours during BST business hours (9 AM – 10 PM, UTC+6); within 6 hours overnight

For data rights requests (access, erasure, portability, etc.), please use the subject line "Data Rights Request" and include your registered email address and account username so we can verify your identity efficiently.