bc22 Privacy Policy — How We Protect Your Personal Data

Introduction & Scope

This Privacy Policy ("Policy") describes how bc22 ("bc22", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you", "your", "the Player") who access or use the bc22 platform at https://bc22.io, including the website, mobile experience, and all associated services, features, and content.

This Policy applies to all current and former bc22 players, prospective players who visit the bc22 website without registering, and any individual who contacts bc22 support or otherwise interacts with bc22. This Policy does not apply to the data practices of third-party websites, payment processors, or game providers that may be accessible through or linked from the bc22 platform — those entities operate under their own privacy policies.

By registering for a bc22 account, making a deposit, placing a wager, or otherwise using the bc22 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to the processing described in this Policy, you must cease using the bc22 platform immediately.

Who We Are (Data Controller)

For the purposes of data protection law, bc22 is the data controller responsible for the personal data collected and processed through the https://bc22.io platform. As data controller, bc22 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about how bc22 processes your personal data, or if you wish to exercise any of your data protection rights, please contact our Data Protection team using the details set out in Section 15 of this Policy.

Personal Data We Collect

bc22 collects the following categories of personal data:

3.1 Identity Data. This includes your full legal name, date of birth, nationality, and copies of government-issued identification documents (such as your National Identity Card, passport, or driver's licence) provided during account registration or KYC verification. bc22 requires this data to verify that you are at least 21 years of age and to confirm your identity for security and compliance purposes.

3.2 Contact Data. This includes your email address, mobile phone number, and residential address (which may include your city — for example Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar — and your district and postcode). We use contact data to communicate with you regarding your account, transactions, promotions (where you have consented), and support enquiries.

3.3 Financial Data. This includes your mobile wallet identifiers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), card details (Visa, Mastercard), and a complete record of all deposits, withdrawals, wagers, and bonuses associated with your bc22 account. Financial data is used to process transactions and to comply with anti-money laundering (AML) obligations.

3.4 Technical Data. This includes your IP address, device identifiers, browser type and version, operating system, screen resolution, time zone (including Bangladesh Standard Time, UTC+6), session tokens, and login timestamps. Technical data is collected automatically when you use the bc22 platform and is used for security monitoring, fraud detection, and platform optimisation.

3.5 Usage Data. This includes information about how you interact with the bc22 platform — including which pages you visit, which games you play (casino games, slots, cricket betting, e-sports, European Roulette Pro, etc.), how long you spend on each game, your wagering patterns, and responsible gaming tool usage. This data helps bc22 personalise your experience and monitor for signs of problem gambling.

3.6 Communications Data. This includes records of all communications between you and bc22, including live chat transcripts, email correspondence, support ticket submissions, and any documentation you provide in connection with a dispute or complaint.

3.7 Marketing Preferences. This includes your opt-in or opt-out status for promotional communications from bc22, including information about cricket betting promotions (BPL, IPL, T20 World Cup), seasonal offers (Eid, Pohela Boishakh), and new game launches.

How We Collect Personal Data

bc22 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or opting in to promotional communications.
• Automatic collection: Technical and usage data collected automatically through cookies, server logs, session tracking, and similar technologies when you browse or interact with the bc22 platform.
• Third-party sources: Identity verification data received from KYC/AML service providers; transaction confirmation data from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks); and fraud risk signals from security service providers.
• Inferred data: Analytical insights derived from your usage patterns and gaming behaviour, used to personalise your experience and to support responsible gaming monitoring.

How We Use Your Personal Data

bc22 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your bc22 player account; processing login authentication; enforcing account security measures.
• Identity & age verification: Confirming that you are at least 21 years of age and that your identity matches the information provided during registration, in compliance with responsible gaming obligations.
• Transaction processing: Handling deposits and withdrawals via bKash, Nagad, Rocket, Upay, partner banks, Visa, and Mastercard; maintaining accurate financial records; crediting bonus amounts.
• Legal & regulatory compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and KYC obligations; maintaining records as required by applicable law; responding to lawful requests from competent authorities.
• Fraud prevention & security: Detecting and preventing unauthorised access, account takeover, payment fraud, bonus abuse, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
• Customer support: Responding to your enquiries, resolving disputes, and improving the quality of our support services.
• Platform improvement: Analysing usage patterns to improve game offerings, user interface, betting markets (cricket, e-sports, etc.), and overall platform performance.
• Responsible gaming: Monitoring wagering behaviour for signs of problem gambling; enforcing self-exclusion, deposit limits, and session time limits; communicating responsible gaming resources.
• Marketing communications: Sending promotional emails, offers, and notifications about new games, cricket betting markets, seasonal promotions, and bonuses — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time by contacting [email protected].

Legal Bases for Processing

bc22 processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform our contract with you — including account registration, transaction processing, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable laws — including AML/KYC obligations, age verification requirements, and responding to lawful authority requests.
• Legitimate interests: Processing for bc22's legitimate business interests, including fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing that relies on your freely given, specific, informed, and unambiguous consent — primarily marketing communications and certain cookie-based analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Cookies & Tracking Technologies

bc22 uses cookies and similar tracking technologies (such as web beacons and session storage) to operate the platform, remember your preferences, maintain session security, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for the bc22 platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and game display options, so that you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregated data about how players use the bc22 platform, which pages are most visited, and how long sessions last. This information helps bc22 improve the platform experience.
• Marketing cookies: Used only where you have provided explicit consent to receive personalised promotional communications. These cookies help bc22 deliver relevant offers based on your gaming activity and preferences.

You may manage or withdraw consent for non-essential cookies at any time through your browser settings. Note that disabling certain cookies may limit the functionality of some platform features.

Sharing Your Personal Data

bc22 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

8.1 Payment Processors. To process deposits and withdrawals, bc22 shares necessary financial data with your chosen payment provider — which may include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard. Each payment provider is a separate data controller for the data it receives and operates under its own privacy policy.

8.2 Game Providers. To deliver casino games and betting markets, bc22 shares necessary session and wagering data with game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers are bound by contractual data protection obligations and use the shared data solely to operate the relevant games.

8.3 Identity Verification & KYC Providers. To fulfil age verification and KYC obligations, bc22 may share identity documents and personal details with accredited third-party verification service providers. These providers process data on bc22's behalf under strict contractual data processing agreements.

8.4 Fraud Prevention & Security Providers. bc22 uses third-party fraud detection and cyber-security services. These providers may receive technical data (such as IP addresses and device fingerprints) for the purpose of identifying and preventing fraudulent activity.

8.5 Legal & Regulatory Authorities. bc22 will disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law — for example, in connection with an AML investigation, a court order, or a lawful government request. bc22 will notify you of any such disclosure where legally permitted to do so.

8.6 Business Transfers. In the event that bc22 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players before any such transfer takes place and before data becomes subject to a different privacy policy.

International Data Transfers

bc22 operates in the online gaming industry and, as a result, some of the third parties with whom we share data (including game providers and technical infrastructure providers) may be located outside Bangladesh. Where personal data is transferred internationally, bc22 ensures that appropriate safeguards are in place to protect your data to at least the same standard as described in this Policy.

Such safeguards may include contractual clauses binding the recipient to equivalent data protection standards, or the recipient's participation in a recognised data protection framework. If you have questions about the safeguards applied to a specific international transfer, please contact us at [email protected].

Data Retention

bc22 retains personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by applicable law. The following retention guidelines apply:

• Active account data: Retained for the duration of your active relationship with bc22, plus a minimum of five (5) years after account closure to satisfy AML and financial record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of submission, in line with AML legislation applicable to online gaming operators.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Communications and support records: Retained for three (3) years from the date of the last communication, unless the communication forms part of an ongoing dispute, in which case it is retained until the dispute is fully resolved.
• Marketing preference data: Retained until you withdraw consent or request deletion, at which point your preferences are updated within five (5) business days.
• Technical and usage data: Retained in aggregated, anonymised form indefinitely for platform analytics. Raw technical logs are retained for a maximum of twelve (12) months.

When personal data is no longer required and no legal retention obligation applies, bc22 will securely delete or irreversibly anonymise that data.

Security of Your Personal Data

bc22 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bc22 servers.
• One-way cryptographic hashing of passwords — bc22 staff cannot view your password and neither can any third party.
• Access controls ensuring that only authorised bc22 personnel have access to personal data, on a strict need-to-know basis.
• Regular security audits, vulnerability scanning, and penetration testing of the bc22 platform infrastructure.
• Real-time fraud detection and anomaly monitoring to identify and respond to suspicious activity on player accounts.
• Secure data storage with encryption at rest for sensitive data categories including financial data and identity documents.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bc22 will notify affected players without undue delay and will take all necessary steps to contain and remediate the breach.

Your Data Protection Rights

As a data subject, you have the following rights in relation to the personal data bc22 holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". bc22 will respond within five (5) business days of receiving a valid request.

• Right of access: You have the right to request a copy of all personal data bc22 holds about you, together with information about how it is being processed (a "subject access request").
• Right to rectification: If any personal data bc22 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure ("right to be forgotten"): You may request that bc22 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that bc22 may be unable to fulfil an erasure request where retention is required by law (for example, AML record-keeping obligations).
• Right to restrict processing: You may request that bc22 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being verified, or where you have objected to processing based on legitimate interests and bc22 is assessing whether its interests override yours.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another data controller.
• Right to object: You have the right to object at any time to the processing of your personal data where bc22 relies on legitimate interests as the legal basis. You also have an absolute right to object to processing for direct marketing purposes.
• Rights related to automated decision-making: bc22 does not currently make decisions that have a significant legal or similarly significant effect on you based solely on automated processing without human review. If this practice changes, we will update this Policy and provide you with the right to request human review of any such decision.

Children & Minors

The bc22 platform is strictly intended for adults aged 21 and above. bc22 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. If bc22 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately, the associated account will be permanently closed, and any funds held in the account will be handled in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a person under your care has registered for or used bc22, please contact us immediately at [email protected]. We take underage access extremely seriously and will act swiftly on any such report.

Changes to This Privacy Policy

bc22 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our data processing practices, new product or service offerings, or improvements to the clarity of our disclosures. When material changes are made to this Policy, bc22 will notify registered players via email and will display a prominent notice on the bc22 platform for a minimum of thirty (30) days following the update.

The "Last Updated" date displayed at the top of this Policy will be revised each time a change is made. We encourage you to review this Policy periodically so that you remain informed about how bc22 protects your personal data. Your continued use of the bc22 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

Where a proposed change would result in materially less favourable data protection for existing players, bc22 will seek fresh consent before applying the change to previously collected data.

Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or wish to raise a concern about bc22's data handling practices, please contact our Data Protection team using the following details:

• Email: [email protected] — please use the subject line "Privacy / Data Request" for data protection enquiries.
• Response time: bc22 aims to respond to all data protection enquiries within five (5) business days of receipt.
• Operating hours: Our support team operates 24 hours a day, seven days a week, Bangladesh Standard Time (UTC+6).

bc22 takes all privacy concerns seriously. If you are not satisfied with our response to a data protection enquiry or complaint, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.