bd332 Privacy Policy — Your Data, Your Rights, Our Commitment

01 Introduction

This Privacy Policy ("Policy") explains how bd332 ("we", "us", "our", or "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", or "the Player") who register for or interact with the bd332 platform, accessible at bd332.io, and all associated services including sportsbook, live casino, slots, crash games, and customer support (collectively, the "Services").

bd332 is committed to protecting your privacy and handling your personal information with transparency, integrity, and strict security standards. This Policy is designed to give you a clear and complete picture of our data practices so you can make informed choices about your personal information.

This Privacy Policy forms part of, and should be read together with, the bd332 Terms & Conditions and Responsible Gaming Policy. By registering an account with bd332 or by continuing to use the Services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

02 Data Controller

For the purposes of this Privacy Policy, bd332 acts as the data controller in respect of the personal data collected from players accessing the Services through bd332.io. As the data controller, bd332 determines the purposes and means of processing your personal data.

All data protection enquiries, access requests, correction requests, and complaints should be directed to the bd332 data protection contact point:

• Email: [email protected]
• Subject Line (for data requests): "Data Privacy Request"
• Response Time: Within 14 business days of receipt of a verified request
• Support Language: English
• Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

03 Personal Data We Collect

bd332 collects the following categories of personal data from players. We collect only what is necessary for the specific purposes described in Section 05 of this Policy.

04 How We Collect Your Data

bd332 collects personal data through the following primary channels:

• Direct registration: When you create a bd332 account, you actively provide your name, contact details, date of birth, and preferred payment method.
• Identity verification: When we request KYC documentation, you provide identity documents directly in response to our verification request.
• Platform activity: As you use the platform — depositing, placing bets, playing games, withdrawing — transactional and activity data is automatically recorded by our systems.
• Payment processors: When you complete a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, limited transaction confirmation data is returned to bd332 by the payment processor to confirm the status of the transaction.
• Device and browser: Technical data including your IP address, device type, and browser information is collected automatically when you access bd332.io.
• Cookies and tracking technologies: bd332 uses cookies and similar technologies on its platform as described in Section 10 of this Policy.
• Support interactions: When you contact our support team via live chat or email, the content of those communications is recorded and stored.
• Third-party fraud and compliance providers: In some cases, we may receive data about you from third-party identity verification or fraud prevention services that we have engaged to protect the integrity of the platform.

05 Why We Use Your Personal Data

bd332 uses your personal data for the following specific purposes. We do not use personal data for any purpose incompatible with those listed below without first obtaining your consent or having a legitimate legal basis to do so.

• Account creation and management: To register your account, verify your identity, manage your profile, and maintain accurate records of your account status.
• Service delivery: To process your deposits and withdrawals, record your bets and gaming activity, calculate and pay out winnings, and provide all platform functionality.
• Identity and age verification (KYC): To verify that you are who you claim to be and that you meet the minimum age requirement of 21 years. This is a mandatory compliance obligation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited activities that could harm the platform or other players.
• Regulatory compliance: To meet our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and financial record-keeping requirements.
• Customer support: To respond to your enquiries, resolve complaints, and improve the quality of our support service over time.
• Responsible gaming: To monitor for signs of problem gambling, enforce self-exclusion requests, and implement deposit limits and other responsible gaming controls.
• Platform improvement: To analyse usage patterns, identify technical issues, and develop new features that improve the player experience on bd332.
• Marketing communications (with consent only): To send you promotional offers, bonus announcements, and platform news — strictly where you have provided consent to receive such communications, and only until that consent is withdrawn.
• Legal proceedings: To exercise or defend legal claims arising in connection with your account or use of the Services.

06 Legal Basis for Processing

bd332 processes your personal data on the following legal bases depending on the nature of the processing activity:

• Contract performance: Processing necessary to fulfil our contractual obligations to you under the bd332 Terms & Conditions — including account management, transaction processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations, KYC requirements, and financial record-keeping mandates.
• Legitimate interests: Processing necessary for bd332's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily used for marketing communications. You may withdraw consent at any time without affecting the legality of processing that occurred before the withdrawal.

07 Data Sharing & Third Parties

bd332 does not sell your personal data to any third party. We share personal data only in the following limited circumstances and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum transaction data necessary to process your deposits and withdrawals. Each of these providers operates under its own privacy policy and data security standards.
• Identity and age verification providers: Third-party KYC service providers may receive copies of identity documents you submit for verification purposes. These providers are contractually bound to process your data only for the purpose of identity verification and to maintain strict data security standards.
• Fraud prevention and AML compliance services: Specialised third-party services that assist bd332 in detecting suspicious activity, verifying transaction legitimacy, and meeting AML/CTF obligations may receive limited account and transaction data for screening purposes.
• Game studio partners: Studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive a player session token and limited game interaction data necessary to serve the game interface. These studios do not receive your full identity details or financial data.
• IT and hosting providers: Cloud infrastructure and hosting services used to operate bd332.io may process data on our behalf as data processors under strict contractual data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory authority, bd332 may disclose personal data to law enforcement or government bodies. We will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bd332's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

08 Data Retention

bd332 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

When the relevant retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised, aggregated data (such as overall platform traffic statistics) may be retained indefinitely for analytical purposes as it no longer constitutes personal data.

09 Data Security

bd332 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 SSL encryption for all data in transit between your browser or app and bd332 servers.
• AES-256 encryption for sensitive personal data stored in our databases, including identity documents and payment method details.
• Access controls: Personal data is accessible only to authorised bd332 staff on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations.
• Multi-factor authentication for all internal systems and administrative access points.
• Regular security audits and penetration testing conducted by independent security specialists.
• Intrusion detection systems that monitor platform traffic for anomalies and suspicious access patterns in real time.
• Secure data centres with physical access controls, CCTV monitoring, and environmental protections.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bd332 will notify you without undue delay in accordance with applicable legal requirements.

10 Cookies & Tracking Technologies

bd332 uses cookies and similar tracking technologies on the bd332.io platform to ensure core functionality, improve your experience, and gather analytics data that helps us develop a better product. The following types of cookies are used:

• Essential cookies: These cookies are strictly necessary for the platform to function correctly. They manage your login session, maintain your account authentication state, and support security features. These cannot be disabled without affecting platform functionality.
• Analytics cookies: These cookies help bd332 understand how players navigate and interact with the platform — for example, which game categories are most visited, how long sessions last, and where players encounter difficulties. This data is aggregated and used solely for platform improvement.
• Preference cookies: These cookies remember your settings and preferences (such as language and display options) so you do not need to re-configure them on every visit.
• Fraud prevention cookies: Certain cookies support our fraud detection systems by helping identify devices and access patterns associated with prohibited activities such as multi-accounting or automated bot usage.

Most web browsers accept cookies by default. You can configure your browser to reject cookies or to alert you before accepting them. Please be aware that disabling essential cookies will prevent you from logging into your bd332 account and using core platform features.

11 Your Data Rights

As a player on bd332, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Privacy Request" and include your registered mobile number or email address for identity verification purposes.

• Right of access: You have the right to request a copy of all personal data that bd332 holds about you. We will provide this in a structured, commonly used format within a reasonable timeframe.
• Right of rectification: If any personal data bd332 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure ("right to be forgotten"): You may request that bd332 delete your personal data. This right is subject to legal retention obligations — we may need to retain certain data for up to seven years for regulatory compliance as detailed in Section 08.
• Right to restrict processing: In certain circumstances, you have the right to request that bd332 restrict its processing of your personal data — for example, while a dispute about accuracy is being resolved.
• Right to data portability: You have the right to receive your personal data in a machine-readable format and to have it transmitted directly to another controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests. bd332 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is consent-based (for example, marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.

12 Minors & Age Policy

bd332 operates a strict 21+ age policy. The Services are not directed at, and are not intended for use by, any person under the age of 21. bd332 does not knowingly collect personal data from individuals under 21 years of age.

If bd332 discovers or has reasonable grounds to believe that it has collected personal data from a person under the age of 21, the account in question will be immediately suspended, all associated personal data will be reviewed, and the data of the underage individual will be securely deleted to the fullest extent permitted by applicable regulatory obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account with bd332, please contact [email protected] immediately with the subject line "Underage Account Report". We will investigate and take appropriate action within 24 hours of receiving your verified report.

13 International Data Transfers

bd332 primarily processes and stores your personal data within secure data centres that serve the South and Southeast Asian region, with a primary focus on delivering low-latency service to players in Bangladesh. In some circumstances, personal data may be accessed by or transferred to service providers operating in other jurisdictions — for example, cloud infrastructure providers or international fraud prevention services.

When personal data is transferred internationally, bd332 ensures that appropriate safeguards are in place to protect your data to the same standard as described in this Privacy Policy. Such safeguards may include:

• Contractual data processing agreements with standard data protection clauses obligating the recipient to maintain appropriate security and confidentiality standards.
• Transfers only to jurisdictions or recipients that provide an adequate level of data protection as assessed by bd332.
• Technical security measures (encryption, access controls) applied to data at rest and in transit regardless of geographic location.

You may request further information about international transfer safeguards applicable to your personal data by contacting [email protected].

14 Changes to This Privacy Policy

bd332 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform functionality, legal obligations, or regulatory requirements. All changes will be posted on this page with an updated "Last Updated" date visible at the top of the Policy.

For material changes — those that significantly affect how we collect, use, or share your personal data — bd332 will provide advance notice via your registered email address or via a prominent notice on the platform before the changes take effect. Your continued use of the Services after the effective date of a revised Policy constitutes your acceptance of the changes.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd332 handles your personal data, please reach out through the following channel:

• Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" or "Data Privacy Request"
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 14 business days.
• Support Hours: 24/7 — English Live Chat and Email
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

We take all privacy enquiries seriously. Whether you are exercising a data right, raising a concern about how your data has been used, or simply seeking clarification on any aspect of this Policy, our team is here to help and will respond in plain English.