Privacy Policy — bd2333

1. Personal Data We Collect

bd2333 collects personal data through several channels: the account registration form, identity verification processes, payment transactions, customer support interactions, and automatic technical collection during platform use. The categories of data we collect are described below.

We do not knowingly collect sensitive personal data beyond what is required for identity verification and responsible gaming compliance. We do not collect biometric data other than identity document photographs required by our KYC process.

2. How We Use Your Personal Data

bd2333 uses the personal data we collect for specific, legitimate purposes only. We do not use your data for any purpose that is incompatible with the reason it was originally collected. Our primary purposes are as follows:

• To create, manage, and maintain your player account and verify your identity.
• To process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard).
• To comply with Know Your Customer (KYC) and anti-money laundering (AML) obligations.
• To detect and prevent fraud, cheating, multi-accounting, and other prohibited conduct.
• To enforce our Terms & Conditions, including the investigation and resolution of disputes.
• To administer bonuses, promotions, and loyalty rewards relevant to your account activity.
• To send transactional communications such as deposit confirmations, withdrawal updates, and security alerts.
• To monitor gameplay and account behaviour in support of our Responsible Gaming obligations.
• To improve the platform through aggregated analytics on how players interact with games and features.
• To send promotional communications where you have opted in to receive them. You may withdraw this consent at any time by updating your notification preferences in account settings.

bd2333 does not use automated decision-making or profiling that produces legal or similarly significant effects on players without human review. Where automated checks are used — for example, in fraud screening — any account action arising from those checks is reviewed by a member of the bd2333 operations team before being applied.

3. Legal Basis for Processing

bd2333 processes your personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you as a registered player, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, identity verification requirements, and data retention obligations.
• Legitimate interests: Processing carried out in our legitimate interests as a business, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given consent, primarily for optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing that took place before withdrawal.

4. Sharing Your Personal Data

bd2333 does not sell or rent your personal data to any third party. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: bKash, Nagad, Rocket, Upay, and card scheme operators receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers receive identity documents and verification data to complete the required checks.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, PG Soft, Spribe, and Ezugi may receive anonymised session data to facilitate game delivery and calculate returns.
• Technology infrastructure: Cloud hosting, database, and security service providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory direction, bd2333 may disclose personal data to law enforcement or government bodies in Bangladesh or other relevant jurisdictions.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third parties with whom we share personal data are contractually required to handle it in accordance with applicable data protection standards and to use it only for the purpose for which it was shared.

5. Cookies and Tracking Technologies

bd2333 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and collect analytics data that helps us improve the player experience. Cookies are small text files stored on your device by your browser.

• Essential cookies: Required for the platform to function. They maintain your login session, remember your language and currency settings, and support security features. These cannot be disabled without impacting core functionality.
• Performance cookies: Collect anonymised data on how players navigate the platform, which pages are most visited, and where errors occur. This data is used exclusively to improve platform performance.
• Functional cookies: Remember optional preferences such as game display settings and notification choices to personalise your experience across sessions.
• Analytics cookies: Help us understand aggregate player behaviour so we can optimise our game library, promotional offers, and site structure. Data is processed in aggregate and not linked to identifiable individuals.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling cookies may affect the functionality of certain platform features. bd2333 does not use third-party advertising or retargeting cookies.

6. Data Retention

bd2333 retains personal data for as long as your account is active and for a period thereafter as required by our legal and regulatory obligations. The general retention periods we apply are set out below.

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, in line with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction to satisfy financial record-keeping obligations.
• Communication records: Support chat transcripts and email correspondence are retained for up to three years to assist in dispute resolution and quality assurance.
• Technical and usage data: Log files and session data are retained for up to 12 months in active systems, after which they are archived or deleted.
• Marketing consent records: Retained for the period during which consent is active, plus an additional record of consent withdrawal for compliance purposes.

When personal data is no longer required for any lawful purpose, it is securely deleted or irreversibly anonymised. Data held in backups is deleted in line with our scheduled backup rotation policy.

7. Your Privacy Rights

As a player using the bd2333 platform, you hold a number of rights in relation to the personal data we hold about you. bd2333 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights listed below, please contact our support team with your account details and a clear description of your request.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is used.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you may request that we correct it.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: You may request that we limit the way we use your data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

We aim to respond to all privacy rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

8. Data Security

bd2333 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our core security practices include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bd2333 servers.
• Encrypted storage of sensitive data fields including payment references and identity document copies.
• Role-based access controls ensuring that only authorised personnel can access personal data, limited to what is required for their specific function.
• Regular security assessments and penetration testing of platform infrastructure.
• Secure, redundant data centres with physical access controls and environmental protections.
• Mandatory security training for all staff who handle personal data.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, bd2333 will notify affected players promptly and take all available steps to contain and remediate the breach. You are also encouraged to practise good account security by choosing a strong, unique password and not sharing your login credentials with anyone.

9. Children and Minors

bd2333 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent minors from accessing the platform. If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will delete that data immediately and close the associated account.

If you believe that a minor has registered on bd2333, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

10. International Data Transfers

bd2333 operates infrastructure that may be hosted in data centres located outside Bangladesh. Where personal data is transferred to service providers in other countries, we ensure that appropriate safeguards are in place to protect your data to the same standard as required under this policy. Such safeguards include contractual data processing agreements that impose data protection obligations on the recipient.

We do not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first putting in place appropriate contractual protections. Transfers to our game provider partners — including Pragmatic Play, Evolution Gaming, and others — are governed by the data processing terms within our supplier contracts.

11. Changes to This Privacy Policy

bd2333 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes, we will notify registered players via the platform interface or by email where a valid address is held on file. The date at the top of this policy indicates when it was last revised.

We encourage you to review this policy periodically. Continued use of the bd2333 platform following notification of an update constitutes your acceptance of the revised policy. If you do not agree with a material change, you should stop using the platform and may request account closure by contacting our support team.

12. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd2333 handles your personal data, please contact our support team. We are available 24 hours a day, seven days a week via live chat from within the platform. You may also write to us at [email protected] (plain text — not a clickable link). We will acknowledge all privacy-related enquiries within one business day and provide a substantive response within 30 days.